Can we use Single OpenVPN Point2Site for Multiple Accounts

0

Hi all,

We are having a setup where multiple Accounts are there about 3. We have Placed one OPENVPN server in Account A. Account B and C are peered with Account A like A-----B A----C There is no connection between B and C. Is this setup possible for using single OPENVPN Server for multiple Accounts? Challenges faced below: 1). I was able to ping a destination but not able to take the remote of the destination server. 2). Routes have been added in both end to allow traffic to respective destination. 3). I was able to traceroute two destination server which was reaching. Other servers are not reaching.

Is there anything else missing or any misconfiguration.

Kindly share your thoughts.

1개 답변
0

Hey Vijaygvasan!

I'm curious as to what your use case is that you decided to use OpenVPN to connect AWS accounts together. If you have resources in different VPC's that need to communicate with each other (within or across accounts), you can utilize VPC Peering. VPC Peering allows for connectivity between different VPC's, essentially extending your private network. For a small amount of accounts, in your case 3, this would be perfect, especially if you're trying to maintain a connection to account A without inadvertently creating a connection between accounts B and C. Creating a VPC peering connection is free, but keep in mind data transfer charges could still apply.

If however, your AWS footprint grows and you would like to extend connectivity across different VPC's in a transitive manner, then we also have a Transit Gateway that makes it very easy to administer and handle connections to different VPCs, similar to VPC Peering, but in a hub-spoke model.

Here are some helpful links: What is VPC Peering: https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html VPC Peering to different accounts: https://docs.aws.amazon.com/vpc/latest/peering/create-vpc-peering-connection.html#different-account-same-region Transit Gateway: https://aws.amazon.com/transit-gateway/

Hope this helps!

AWS
Cesar U
답변함 10달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠