stradio
Hi Everyone,
I have successfully set up OpenVPN for my office to connect to AWS and everything is working fine when it comes to accessing private subnets on AWS. We have been using it for a few months now but a new requirement has arisen now.
We have set up our vpn so that only private network traffic is routed through it meanwhile all public traffic goes through our regular office internet connection so that we wouldn't hog up the server with everyone's daily browsing and downloading needs.
The requirement has now come that there are certain public addresses that we want to route through our VPN on top of all the private network traffic and I was wondering if this is possible.
For example, I have a website called beta.mycompany.com which is locked down through security groups to be accessible only from the IP address of the office, in the moment that I leave the office and I want to access the website through vpn, I HAVE to know the private IP address of it so that I can connect to it through my openvpn connection. This effectively means that I always have to use two different addresses whether I am in the office or out of the office making the task very cumbersome and annoying for developers.
Is there a way that I can cherrypick certain public URL's/IP addresses and route only those through vpn instead of having to strictly use only private IP addresses?
After a lot of online searching the only plausible solution I have found is to change our VPN setup to route ALL traffic (both private and public) through it and hence manage to access all the public URL's we want. This can work out, but it would mean having a lot of traffic passing through our OpenVPN server plus having to put some kind of Access Rules to stop people browsing unwanted websites. The only sensible way of doing this would be to put a squid proxy next to OpenVpn to have access rules available but this would make all the setup a lot more complex.
Does anyone have a better solution in mind for this?
Thanks in advance for the help
