| 1 |
Scenario: I have a server in the cloud that needs to connect to an internal |
| 2 |
server in the office. There are 2 incoming connections into my office, ISP |
| 3 |
"A" and ISP "B". The primary connection is A, but if A goes down, we can |
| 4 |
use B. The app running on the cloud server has no automatic failover |
| 5 |
ability (i.e., if A goes down, someone must change the app's conf to point |
| 6 |
to B). |
| 7 |
|
| 8 |
My thought: If I can make a tunnel from the server to the FortiGate |
| 9 |
firewall currently guarding the HQ, the cloud app can simply be configured |
| 10 |
to connect to the internal IP address of the internal server. No need to |
| 11 |
manually change the app's conf. |
| 12 |
|
| 13 |
The need: a VPN client that: |
| 14 |
+ can selectively send packets fulfilling a criteria (in this case, dest= |
| 15 |
IP address of internal server)* |
| 16 |
+ has automatic failover and failback ability |
| 17 |
|
| 18 |
*solutions involving iptables and iproute2 are also acceptable |
| 19 |
|
| 20 |
Can anyone point me to the right direction re: what package and the |
| 21 |
relevant howto? |
| 22 |
|
| 23 |
Thanks in advance. |
| 24 |
|
| 25 |
Rgds, |
Archives