jxfish2
To whom it may concern,
I am brand new to OpenVPN, and to Firewalls.
I've been working with Linux and Unix for years, but never had a need for either before now.
Here is what I need to accomplish:
I have an application server (multiple application servers), that needs to connect to a database server (multiple DB servers in high availability / failover configuration, using a virtual IP address)
I already have all external client connections coming in through a VPN tunneling solution, that is manually implemented from the client side PC.
But, I need to create a permanent / persistent tunnel between the app server(s) and DB server(s), where I can "force" all traffic destined for the DB server to go through the tunnel.
Adding to the complexity, in that the DB server could failover from one physical server to another, at any given time.
In other words, all traffic between the app servers and db server must be forced to use the tunnel.
I already know how to setup an SSH tunnel, but if that tunnel drops for any reason, the app server "finds a way" to talk to the db server, un-encrypted...
Then, even after I bring the tunnel back up, the two servers continue to talk outside of the tunnel.
1) How do I setup the VPN connection between the two servers?
2) How do I force ALL traffic between the two servers to use the tunnel, or the OpenVPN tunnel?
I'm sorry for asking such a "broad" question, but I have no experience with this particular setup, and very limited time in which to implement a solution.
I would be happy if someone posted solutions here, or if someone could point me to very specific documentation, possibly even specific sections within the documentation, and I will take it from there.
But, I emphasize that I am on a very tight schedule.
That is why I am asking for the help.
