Intro

• VPN - Virtual Private Network, often used to communicate securely over untrusted networks like the internet.
• IPSEC is the protocol which is used for securing the data. Some other tunnelling protocols and frameworks are GRE, DMVPN, Wireguard etc

• Two types of VPNs - Site-to-Site other is Client-to-site /Remote Access VPN, this lab will be a site-to-site VPN.

• Site-to-Site, as the name suggests usually connects two sites and a Site is typically referred to as a group of devices in a Data-Center. Site-to-Site will enable two sites separated over the internet to communicate privately and securely over the internet.

Lab Links

Part 1 - https://youtu.be/h8zFEkVXV24

Part 2 - https://youtu.be/PxJ04myIGJs

Part 3 - https://youtu.be/mf-Qymz-_Hg

Site-to-Site

• Think along the lines of two boundary devices which encrypt and decrypts LAN traffic
• Design Redundancy and Scalability along these lines for these two end-points
• It is important to note that you can have VPN to access any services within your VPC as VPC can be visualised as a virtual Data-Center and thus you can not have a VPN for a service like S3 which is a public offering and can be reached via the Internet

• Let's imagine you have built your own VPN server in your on prem-Data centre, we have to connect it to our AWS VPC