Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

So I have a few VPS's and dedicated servers with a few different hosts. All have multiple IPs allocated to them.

How can I go about creating a private LAN to connect all these together? It needs to be secure and ideally a simple process to add more nodes to the private LAN.

Is this possible, and how secure would a setup like this be if say one of the nodes were compromised?

Thanks!

share|improve this question
add comment

3 Answers

up vote 3 down vote accepted

In theory, OpenVPN can create virtual layer 2 networks. See the example here:

I haven't set this up myself, but I think this is pretty much what you're asking for.

share|improve this answer
add comment

Once you have the virtual layer 2 network set up (see other answers, or you can try IPSec), the VPN interface can have the same firewall rules applied to it as regular interfaces. In case one node on the virtual subnet gets compromised they will have complete access to that subnet and you should plan accordingly.

In more old-school networks the logical equivalent would be preventing one host in a DMZ from being able to do Bad Things to other hosts in that DMZ. The networking problem is very similar, it's just that you have a virtual interface as your 'trusted-side' network which can change some of the specific details.

share|improve this answer
add comment

A VPN would be a great way to achieve this. It encrypts all data(secure) and it would be rather easy to connect a node add it to the VPN. If a node is compromised it would be comparable if they were in a local LAN. Depending on OS there are different VPN protocols that could suite your needs.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.