Can we use Single OpenVPN Point2Site for Multiple Accounts

0

Hi all,

We are having a setup where multiple Accounts are there about 3. We have Placed one OPENVPN server in Account A. Account B and C are peered with Account A like A-----B A----C There is no connection between B and C. Is this setup possible for using single OPENVPN Server for multiple Accounts? Challenges faced below: 1). I was able to ping a destination but not able to take the remote of the destination server. 2). Routes have been added in both end to allow traffic to respective destination. 3). I was able to traceroute two destination server which was reaching. Other servers are not reaching.

Is there anything else missing or any misconfiguration.

Kindly share your thoughts.

1 Answer
0

Hey Vijaygvasan!

I'm curious as to what your use case is that you decided to use OpenVPN to connect AWS accounts together. If you have resources in different VPC's that need to communicate with each other (within or across accounts), you can utilize VPC Peering. VPC Peering allows for connectivity between different VPC's, essentially extending your private network. For a small amount of accounts, in your case 3, this would be perfect, especially if you're trying to maintain a connection to account A without inadvertently creating a connection between accounts B and C. Creating a VPC peering connection is free, but keep in mind data transfer charges could still apply.

If however, your AWS footprint grows and you would like to extend connectivity across different VPC's in a transitive manner, then we also have a Transit Gateway that makes it very easy to administer and handle connections to different VPCs, similar to VPC Peering, but in a hub-spoke model.

Here are some helpful links: What is VPC Peering: https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html VPC Peering to different accounts: https://docs.aws.amazon.com/vpc/latest/peering/create-vpc-peering-connection.html#different-account-same-region Transit Gateway: https://aws.amazon.com/transit-gateway/

Hope this helps!

AWS
Cesar U
answered 9 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions