Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have a dedicated server that is primarily used to host our website. I've been tasked with determining the feasibility of setting up a VPN connection from it to our Internal Network at our offices for a few ease of use purposes. My concern is that if I establish this VPN connection our Website will only be available internally and not to the internet in general. I'm concerned about this because in everything I read the fact is stated that by default all network traffic is routed over the VPN connection when it's established, is this also true for applications such as IIS that are listening for incoming connections?

TL;DR Will having a VPN Client up and running cause a problem with server applications that may be listening on the NIC connected to the Internet due to changes that VPN makes in the routing tables?

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

If you're using the webserver as a VPN client, then typical setups will add the VPN gateway as the default gateway. This does not mean that incoming connections to the server will suddenly be blocked, but it means that any connections initiated by the webserver will go via the VPN.

I'd do some testing to ensure that a webserver with a VPN tunnel established can still listen on the required IP. One option you might want to consider is a split-tunnel VPN, where a VPN connection is established but the normal default gateway is kept. This means that traffic destined for your office internal is routed up the VPN, but default internet traffic is routed via the usual interface.

share|improve this answer
    
Thanks for the advice. I'll give this a try, it looks to be what I was looking for. –  f1gm3nt3d Mar 11 '11 at 14:16
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.