OpenVPN gateway

This is a basic installation of a VPN gateway, directly in the cloud.

Requirements for this use case

  • Add a Network Domain
  • Add an Ethernet network
  • Deploy a CentOS server
  • Monitor this server
  • Assign a public IPv4 address
  • Add address translation to ensure end-to-end IP connectivity
  • Add firewall rule to accept TCP traffic on port 22 (ssh) and 943 (openvpn)
  • Install OpenVPN
  • Change the password of the openvpn account

Fittings plan

Copy the text below and put it in a text file named fittings.yaml:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
 ---
 locationId: NA12
 regionId: dd-na

 blueprints:

   - openvpn:

       domain:
         name: OpenvpnFox
         service: essentials
         ipv4: 2

       ethernet:
         name: openvpnfox.servers
         subnet: 192.168.20.0

       nodes:

         - openvpn01:

             appliance: 'CentOS 7 64-bit'
             cpu: 2
             memory: 4
             monitoring: essentials
             glue:
               - internet 22 943

             information:
               - "You can access the server at https://{{ node.public }}:943"
               - "Provide name: openvpn and password: {{ openvpn.secret }}"

             cloud-config:
               disable_root: false
               ssh_pwauth: true
               expire: False
               packages:
                 - ntp
               runcmd:
                 - curl -O http://swupdate.openvpn.org/as/openvpn-as-2.0.24-CentOS7.x86_64.rpm
                 - rpm -i openvpn-as-2.0.24-CentOS7.x86_64.rpm
                 - echo "{{ openvpn.secret }}" | passwd --stdin openvpn

Deployment commands

$ python -m plumbery fittings.yaml deploy

These commands will build fittings as per the provided plan, start the server and bootstrap it.

You can find the public address assigned to the web server like this:

$ python -m plumbery fittings.yaml ping

Follow-up commands

Open a browser window and paste the public address reported by plumbery. You should receive a welcome HTML page in return.

Destruction commands

The more servers you have, the more costly it is. Would you like to stop the invoice?

$ python -m plumbery fittings.yaml stop
$ python -m plumbery fittings.yaml destroy