public-cloud-roadmap icon indicating copy to clipboard operation
public-cloud-roadmap copied to clipboard

Site-2-Site VPNs

Open cambierr opened this issue 4 years ago • 7 comments

As a DevOps, I want to create secure site-2-site communication tunnels So that We can benefit from secure communication for our services


Description:

A very common need when deploying cloud infrastructures at scale is to be able to connect them together through site-to-site tunnels.

On our OVH PoPs, we use dedicated VMs (running VyOs) to act as cloud routers and provide those site-to-site termination. While this is working fine, I'd prefer a managed solution with built-in HA & scaling instead of having do handle this myself.

The way I would see this is:

  1. being able to create OVH <-> external tunnels
  2. being able to apply firewalling at OVH side, somehow like we do for public IPs
  3. being able to have double tunnels to ensure HA
  4. being able to create OVH <-> OVH tunnels (thinking about interfacing two VRACKS or OVH EU with OVH US for instance)
  5. being able to create OVH <-> #other cloud provider# tunnels

This is probably a "next step" that could be built after or on top of https://github.com/ovh/public-cloud-roadmap/issues/40

cambierr avatar Nov 27 '20 13:11 cambierr

Hi,

all the use cases you are referring to are clearly legitimate and I can tell you that they are actively being worked on @OVHcloud ;) Stay tuned, and please keep posting your requests about cloud networking, we'll take them into account for sure :)

Regards,

Mathieu

thieummm avatar Nov 27 '20 14:11 thieummm

Hello everyone, what is the status of this deployment?. What option can i follow to create the ipsec vpn tunnel between a ovh public cloud cluster and a host non cluster ? Anyone can help me with this? thanks you very much in advantage

Juankimr avatar Sep 28 '21 08:09 Juankimr

Hi, @cambierr @thieummm, did you have a guide how to implement this inside a kubernetes container?

Juankimr avatar Oct 02 '21 12:10 Juankimr

any updates on this?

mscheer93 avatar Aug 23 '22 14:08 mscheer93

Hi, Is there any update on this ? Is this even on a roadmap ?

jtama avatar Jul 05 '23 13:07 jtama

+1 for the site-to-site VPN

Rohithzr avatar Feb 27 '24 14:02 Rohithzr