- Newest
- Most votes
- Most comments
If you mean AWS Client VPN, then you can just use Openvpn client to connect to it. This assumes that you are not using the SAML authentication method, as native OpenVPN client can't support it.
If you are talking about AWS Site-to-Site VPN service, then you need to use any IPSEC capable software that is more commonly used on your platform. For Red Hat ecosystem this is typically Libreswan. If you want to use dynamic routing on the Site-to-Site VPN you also need a software capable of processing BGP protocol. This would be Free Range Routing (FRR) in the Red hat ecosystem.
I'm pretty sure there are Red Hat specific guides online that tell you how to setup Libreswan and FRR with AWS Site-to-Site VPN. We also have online guide how to setup Site-to-Site VPN to Amazon Linux 2 available as a blog post.
See below from the ClientVPN FAQ:
Q: What type of devices and operating system versions are supported?
A: The desktop client currently supports 64-bit Windows 10, macOS (Mojave, Catalina, and Big Sur), and Ubuntu Linux (18.04 and 20.04) devices.
Please note AWS does not publicize the roadmap items, I would suggest to keep an eye on https://aws.amazon.com/about-aws/whats-new, then filter by 'Networking and Content Delivery' and search for ClientVPN, also check the Networking Blog page for any new feature announcements.
It is possible there is already a feature request for this; if you have an AWS Account manager you can request to add your influence.
There's a Fedora COPR repository with patched versions of the upstream packages at https://copr.fedorainfracloud.org/coprs/vorona/aws-rpm-packages/
Relevant content
- Accepted Answer
- asked 10 days ago
- asked 2 years ago
AWS OFFICIALUpdated 9 months ago- How do I get notified when the certificate associated to the Client VPN endpoint is about to expire?AWS OFFICIALUpdated 5 months ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated a year ago
Unfortunately, we ARE using SAML.
I have seen some community efforts to add SAML to normal OpenVPN client and also some conversions of Deb packages to RPM packages. But you would be responsible for owning and maintaining that. If you have an AWS account team, then the best option would be to contact them and ask them to deliver your feedback. (Just like Tushar_J comments below)