I have servers that I wish to control access to. I have a firewall running pfSense between them and the public internet, but all machines have public IPs.
A remote client may or may not be on the same subnet as the servers and firewall. I wish to, based on authentication, allow the remote client full access to the servers behind the firewall.
I believe the best way to do this is through VPN.
Note that normally when people refer to VPN connecting the same subnet, they refer to two machines having the same private IP ranges. That is very different than what I am describing. I simply want to tunnel traffic for a subnet through VPN to bypass the firewall.
What is the best way to go about this? If you suggest OpenVPN, tun or tap?