VPNaaS
VPN as a Service (VPNaaS) in OpenStack enables secure, encrypted tunnels between your OpenStack environment and remote networks.
OpenStack VPNaaS relies on key components such as IKE policies, IPSec policies, VPN services, and endpoint groups to establish VPN connections. The Site Connection serves as the orchestrator, integrating these components to ensure they work together.
To get a list of all the VPN Services in a region you can click on the VPN icon in the sidebar.
The VPNaaS overview is organized into tabs, allowing you to access all VPN components and the region from which the VPN operates.
-
Site Connections
The Site Connection defines and manages the secure, encrypted tunnel between your OpenStack environment and a remote site, ensuring reliable communication.
-
IKE Policies
Defines the parameters for the Internet Key Exchange (IKE) protocol, which is used to establish a secure connection between VPN peers. These policies include settings for encryption, authentication, and key exchange methods.
-
IPSec Policies
Specifies the rules and settings for the IPsec protocol, which secures data transmission over the VPN by encrypting and authenticating data packets.
-
VPN Services
VPN service objects are designed to streamline VPN management. Each VPN service object can be associated with only one router and one subnet, ensuring a unique and manageable VPN configuration for each network component.
-
Endpoint Groups
Collections of endpoints, such as subnets or devices, that are part of a VPN connection. They help in organizing and managing these endpoints, making it easier to configure and control VPN traffic.