The server configuration section below will mention how to set up this sort of architecture. That is, your VPN server can route traffic to any IP address in the VPC and all the servers in your VPC can accept traffic only to their private IP addresses (to eth1), which protects those servers and the services they run from all sorts of attacks. You can use your VPN server as a sort of bastion host to access other resources inside your VPC using their private IP addresses. All servers, databases, and load balancers created in the same VPC can communicate with each other via their private IP addresses, which is a boost to security because all inbound traffic from the public internet (on eth0) can be blocked with a firewall. A "droplet" is the term DigitalOcean uses for a "server" or a "VM" or an "instance".ĭigitalOcean servers are automatically created in a Virtual Private Cloud aka VPC (most cloud providers have VPC or private networking functionality), meaning they have an additional network interface ( eth1 in addition to eth0) and an additional private IP address. To create a new DigitalOcean server, follow their guide to creating a droplet. CC BY-SA 4.0, Image attribution: Creative Commons Licenseįor this walkthrough, we'll use a new Ubuntu 20.04 server on DigitalOcean, though you could follow similar steps using any cloud provider. If you're looking to remotely access your own home network, privately network with family/friends, or encrypt all of your internet traffic, then the other computer would be a personal server on a cloud provider like DigitalOcean or AWS. If you're looking to remotely access company intranet sites and services, the other computer would be a server in an office or on a company cloud network. One of these is typically a desktop/laptop/phone in your possession. To set up a VPN, we need two computers that we want to connect. We'll walk through setting up an IPv4-only WireGuard VPN server on DigitalOcean, and I'll highlight tips and tricks and educational asides that should help you build a deeper understanding and, ultimately, save you time compared to "just copy these code blocks" WireGuard tutorials. WireGuard is a relatively new VPN implementation that was added to the Linux 5.6 kernel in 2020 and is faster and simpler than other popular VPN options like IPsec and OpenVPN.
0 kommentar(er)
