We are looking at renting a VMWare ESXi server through a provider. This VMWare ESXi server will be allocated a public IP. Most of the VMs that we will host on this server is only meant to be used internally.
My question is if it would be possible to set up a VPN tunnel (ipsec) from the gateway in our office (Cisco RV082) to the VMWare host server so that we do not have to expose all VMs to the internet? We do not have access to any equipment in front of the VMWare host server.
For example, would it be possible to configure such a tunnel on e.g. a Debian VM, and then achieve the following;
- We can reach all the VMs on the VMWare host via a local ip address on our intranet
- The VMs can reach machines on our intranet via a local ip address
The alternative to this I guess would be to 'buy' 1 public IP address from the provider per VM, and then access the VMs over the internet, each with its own iptables configuration to block access from IPs not stemming from our office.
Any help is appreciated.