AWS site to site VPN

Architect

Onpremis server <–> opnsense <–vpn site to site–> aws VPC

• static routing
• ipsec tunnel x2
• virtual firewall appliance (opnsense)

Testing

1. Auto reconnect when office network temporary disconnect
2. Speed test

ubuntu@ip-172-0-10-172:~$ iperf3 -c 10.0.60.120
Connecting to host 10.0.60.120, port 5201
[  5] local 172.0.10.172 port 34146 connected to 10.0.60.120 port 5201
[ ID] Interval           Transfer     Bitrate         Retr  Cwnd
[  5]   0.00-1.00   sec  62.4 MBytes   524 Mbits/sec  181    705 KBytes
[  5]   1.00-2.00   sec  53.3 MBytes   447 Mbits/sec   18    560 KBytes
[  5]   2.00-3.00   sec  54.6 MBytes   458 Mbits/sec   23    446 KBytes
[  5]   3.00-4.00   sec  48.9 MBytes   411 Mbits/sec   72    370 KBytes
[  5]   4.00-5.00   sec  49.9 MBytes   419 Mbits/sec    0    458 KBytes
[  5]   5.00-6.00   sec  54.9 MBytes   461 Mbits/sec    0    536 KBytes
[  5]   6.00-7.00   sec  58.1 MBytes   487 Mbits/sec    0    611 KBytes
[  5]   7.00-8.00   sec  65.9 MBytes   552 Mbits/sec    0    685 KBytes
[  5]   8.00-9.00   sec  58.0 MBytes   487 Mbits/sec   32    551 KBytes
[  5]   9.00-10.00  sec  50.6 MBytes   424 Mbits/sec  107    457 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.00  sec   557 MBytes   467 Mbits/sec  433             sender
[  5]   0.00-10.04  sec   555 MBytes   464 Mbits/sec                  receiver

iperf Done.