Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have our servers spread over 3 different sites (geographically). So, we have deployed a VPN using OpenVPN so that machines (virtual or not) can communicate to each others, and sysadmins can access any machine. Each site has one (or two) own subnet(s) /24 on the VPN addresses pool. So, far all the clients connect to the same OpenVPN server on a specific machine on a specific site. This is a SPOF and we would like to avoid it.

Reading OpenVPN shows that it is possible to load balance OpenVPN, the whole point is that in such case, clients connect randomly to a server and then, don't see each others.

The whole point here would be to have one server per site, clients connecting to their closest server. And then, to interconnect all the sites together, so that client can see any other client, whatever its site.

Our whole infrastructure is using Ubuntu 12.04LTS and thus OpenVPN 2.2.

If unclear, or imprecise, I can provide more details.

Thanks in advance!

share|improve this question
    
Sooo, what is the question? –  neutrinus Mar 28 at 9:37
    
Oops, sorry. Basically, it is how to ensure that the 3 OpenVPN can communicate together? Share their clients? Act like it is a single network? –  Heis Spiter Mar 28 at 9:39

1 Answer 1

up vote 1 down vote accepted

Just bridge those openvpn servers using "internal" network of openvpns :) Then you would have internal network so the clients can talk to each another.

share|improve this answer
1  
And how to do so? –  Heis Spiter Mar 28 at 9:51
    
Just make 3 P2P openvpn connections and bridge them. Be sure to enable STP to avoid loops. –  neutrinus Mar 28 at 10:41

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.