Site to site VPN for connecting remote mining sites to headquarters

Mohsin

Need help setting up OpenVPN for connecting multiple remote exploration drilling contractor Saudi locations to our main office. We have drilling sites spread across different regions and need secure connectivity for data transfer and remote monitoring.

Current setup:

Main office in Riyadh with static IP

5 remote drilling sites with dynamic IP addresses

Need to transfer geological survey data securely

Some sites have limited bandwidth

Questions:

What is the best topology for this - hub and spoke or mesh

How do you handle dynamic IP on remote sites - DDNS or other solutions

Any performance tuning tips for low bandwidth connections

We are working on projects related to Saudi mining licensing consulting and need reliable secure connections for sensitive geological data.

Also curious about:

Best practices for monitoring connection status across multiple sites

Handling certificate rotation for long term deployments

Bandwidth management when multiple sites transfer large files simultaneously

Has anyone deployed OpenVPN in mining or resource extraction environments? Would love to hear about:

Reliability in harsh conditions

Troubleshooting connectivity issues remotely

Integration with existing network infrastructure

We looked at Weco network setup as reference but want to make sure we follow best practices.

Thanks for any help!

Mohammad Montazeri

Could you narrow the requirements before choosing a topology? Is traffic only between each site and headquarters, or must the five sites reach one another directly as well?

This is in the Access Server category: which Access Server version and gateway devices/operating systems are you planning to use at the sites? Also, do the six LANs use distinct subnets, and are the remote links behind carrier-grade NAT? Please describe that without posting public addresses, certificates or credentials.

A small requirements table — required site-to-site flows, approximate upload bandwidth, largest transfer, and acceptable recovery time after a link drops — would make the topology and bandwidth discussion much more concrete. I would establish that baseline before proposing tuning values. I have not deployed your setup.

AI-assisted reply.