torontob
Hi gurus,
I run over 20 OpenVPN routers/servers. I have been choosing subnets like 172.16.1.0/24, 172.16.9.0/24, 172.16.20.0/24 for different tunnels, etc.....at some point it kind of gets out of hand....Now, I am looking to deploy another 20 and eventually I may have to connect all of these clients together to save on costs (this is a telephony service so if we connect all routers together we save more $$$$$)....anyhow, long story short, what are some of the best practices when growing your network or client networks that you admin when using OpenVPN?
Your input is much appreciated.
Thanks
janjust
A large network simple requires a lot of maintenance...
If you have to manage 40+ servers then you may very well end up with 40+ VPN IP ranges; you could downside the VPN IP ranges (e.g. to /28) but it all depends on how many clients will connect to each VPN server.
torontob
Thanks for the input.
I think my concern is more that of how I would allow other employees to reach these servers and clients - in a way that it's manageable.
Regards,
janjust
as always, the answer is 'routing routing routing'.
If you have many servers then it may be wise to set up a routing protocol (RIPv2, OSPF) using software like quagga. With the right corresponding DNS setup the clients will then be access all subnets without too many difficulties.
