bbd
Hello all, my first post here so apologies if I miss any forum etiquette.
I'm looking for some pointers about the best way to set up multiple servers. I'm self taught with this stuff, so go easy on me. Every day is a school day.
At present we are using OpenVPN successfully on two geographically isolated but network connected sites, one cloned from the other originally, so all the same crypto. New clients are added on one and magically work on the other, but the database isn't replicated so revocation doesn't work on one server. CCD files are generated manually on each server such that the clients are given a different but similar address depending on where they connect, e.g. 10.7.0.34 from server A and 10.7.1.34 from server B. I am happy that I can choose which server each client connects to either randomly or in preference order, so load balancing and resilience is possible. This has all worked fine as a proof of concept and has already become indispensable. We have a mix of Windows machines (on a domain), plus Android and iOS devices.
I am now looking at expanding the number of clients up to more than a hundred and adding four more servers, and the admin process is already becoming unwieldy. I have looked and failed to find much guidance about how best to scale up from where we are to where we need to be. The things I'd like to do are to centralise cert and key admin, duplicate or centralise databases, and make ccd admin easier. Oh, and a gui of some sort would allow admin by those with command line phobia. Servers run on Ubuntu via Hyper-V if thought relevant.
Thanks for reading and please steer me in the right direction.
