Hear you in and welcome back.
Now in today's video, we will be discussing about the Eatables Client VPN.
Now again, this is a great feature that was launched by Douglas because a lot of organizations were
requesting it because running a VPN on top of the easy to instant, this comes with its own set of challenges.
Now, before we go ahead and discuss about a client VPN, let's go ahead and go a step back and understand
on how things used to be implemented extensively before this feature was introduced.
Now, in the older type of architecture, what organizations used to do, they used to install a VPN
on the Essiedu instance.
So you would have an easy to instance in a public subnet, which will have a VPN offering state and
the local computer.
Other employees would connect to the VPN that was installed and easy to do, and then the traffic used
to be adapted to the easy two instances that were part of the private subnet.
Now this type of architecture is perfect.
In fact, you can do a lot of customizations here, but it comes with its own set of challenges.
Now, before we go ahead and discuss about the challenges, let me quickly show you this now.
Currently within a place, I have been easy to instance running and I have installed the open VPN on
top of it.
So let's quickly log in to our open access server here.
So this is how the open we obtain access server looks like.
These are all the configurations.
And in fact, you can do various things like DNS Network, Erdogan's VPN Settings, Failure Management,
Certificate, Authority Management and so on.
So a lot of interesting things, a lot of customization you can do if you have VPN installed or easy
to instance.
Now again, it comes with its own set of challenges here, so let's go ahead and discuss on those.
Now, one of the first challenges is the high availability.
But what if the VPN itself goes down or the easy two instances where the VPN is running goes down?
So what you need to do is you have to go ahead and set the high availability configurations, so you
need to know how to do that.
Based on the VPN software that has been used, for example, for opening VPN access server.
If you quickly go to the failure within year, by default, you do not really have any redundancy.
But in case if you choose to do that, then you'll have to specify various configurations related to
primary node, secondary node and various others.
So you have to do everything related to the VPN, the failure configurations yourself.
And if things are not working properly, you will have to fix it.
So that is related to high availability.
Second primary issue that organizations would face is related to patch management.
I still remember in the organization where we used to work, but we were only two people in the security
team, me and my manager, and we used to handle the VPN for the entire organization.
And every moment, maybe Saturday Sun, any user would always be connected.
So when you do a patch management, and if you had to restart the instance, the user would be disconnected
and there would be a ticket that would be erased.
So this is one of the primary challenges.
Many times what happens after you do a patch management?
The VPN software itself runs into some issues, so you have to do a lot of testing when you do a patch
management on a monthly basis.
Then the next challenges related to upgrade of a VPN software.
The next challenges related to performance optimization.
Again, this is where you spend a lot of time users are comparing.
VPN is running slow.
They're not really able to open the websites in the private two instances and so on.
And the fifth is VPN server configuration.
Like, for example, you have open VPN access over.
You need to know in great detail about that and all of the important configurations.
So these are some of the challenges that you will face if you decide to install VPN on the Essiedu instance.
And in order to work on this, you have the Eatables Client VPN.
So very simple approach.
What you do yet is you go ahead and create a client VPN endpoint, which is basically a managed VPN
service that enables you to securely access to resources as well as the resources on your on premise
network.
So now, since this is a managed service, you do not really need to worry about performance issues
related to issues going down the patch, management, the upgradation of the VPN software and so on.
So this is really a pain relief for the administrators who handle the VPN for the entire organization.
Now let me also quickly show you this now.
Currently within the IWC Council, I have a client VPN that is running, and this Client VPN provides
a great amount of configuration like association, the authorization.
You can create the routing trees, you know, what are the lines that are connected to and so on.
So very straightforward.
We go ahead and create client VPN gold and create the appropriate uses.
I know the entire area related to high availability by management of great performance optimization
is no longer your headache.
The VPN server configuration in a way you are responsible because you have to go ahead and create the
right set of routing the right set of association and so on.
But it is not really complex as creating your own VPN based configuration from scratch.
Now let me in fact show you so.
Currently there is.
I have to see two instances that are running, but among them is the open VPN, where we had installed
the access server and second one is a randomly see two instance that I just launched for testing.
So what we'll do will connect to our client within that we had created via the database and we'll look
into how we can connect to these instances via private IP.
So currently, within my open VPN Connect plan, I already have the profile associated with the Client
VPN imported.
Let's go ahead and quickly connected and great.
We are connected and this connection is made to the client VPN endpoint.
So now let's do one thing.
Let's go ahead and copy the private IP associated with one of the instances.
Let's copy the private IP and from the ceiling.
Let's go ahead and try to bring to this IP, and you'll see the ping is working perfectly well.
Similarly, if you look into the connections, you should see one connection that is available and you
get great details related to this specific connection as well.
Now, in case if you require, you can also terminate the connection, let me also show you this great.
So the connection is terminated.
And when you try to bring the private IP once again, you'll see you are not really able to do that.
Great.
So that is a very high level overview about the Eatables Client VPN and the benefit it provides when
compared to installing the VPN software on top of easy do.
So with this will conclude today's video.