Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to set up a fully redundant OpenVPN tunnel, with two routers on each side.

All the tutorials I saw (such as mention a site-to-site setting, which doesn't seem to work with OpenVPN on a Linux server (which seems to always require a server and a client).

How can I achieve a similar setup using Linux servers?

share|improve this question
up vote 2 down vote accepted

I know it doesn't immediately answer your question, but I'd go for ipsec for site-to-site VPNs. I've been running it between Linux endpoints in production for over a decade, and it's never let me down.

In my experience, it deals much better with temporary failures in the sites' internet connections, lacking as it does any view of one end being a server and the other end being the one to bring the connection up and down; instead, both ends are peers, and either can initiate, terminate, and re-key connections as it sees fit.

It also deals much better with the geometry issue when you add a third site.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.