Setting up network connectivity between cloud and remote resources with IPsec gateways
Written by
Updated at March 14, 2025
Network connectivity between your corporate data center and cloud resources must be properly protected. For this purpose, you can use secure connections.
One of the technologies used for that is an internet connection through IPsec gateways over the IPsec protocol. IPsec
Cloud site:
- Network named
cloud-net
with the following subnets:subnet-a
(172.16.1.0/24
),subnet-b
(172.16.2.0/24
), andipsec-subnet
(172.16.0.0/24
). - Main IPsec gateway named
cloud-gw
as a VM based on the open-source strongSwan solution. Connect this IPsec gateway toipsec-subnet
. The main goal of the gateway is to set up an IPsec connection to a remote gateway and provide network connectivity between test VMs. cloud-net-sg
security group is used for the VM network interface of the main gateway and allows IPsec traffic between the gateways.cloud-net-rt
route table with static routes ensures traffic towardssubnet-1
of the remote site through the main IPsec gateway.- Ubuntu Linux-based test VMs,
vm-a
andvm-b
, get connected tosubnet-a
andsubnet-b
, respectively. These VMs are used to check IP connectivity via an IPsec connection.
Remote site:
remote-net
network withsubnet-1
(10.10.0.0/16
).- Remote IPsec gateway named
remote-gw
as a VM based on the open-source strongSwan solution. Connect this IPsec gateway tosubnet-1
. The main goal of the gateway is to set up an IPsec connection to the main gateway and provide network connectivity between test VMs. remote-net-sg
security group is used for the VM network interface of the remote gateway and allows IPsec traffic between the gateways.remote-net-rt
route table with static routes ensures traffic towardssubnet-a
andsubnet-b
of the cloud site through the remote IPsec gateway.- Ubuntu Linux-based test VM,
vm-1
, gets connected tosubnet-1
. This VM is used to check IP connectivity via an IPsec connection.
The IPsec connection is established between the public IP addresses of the main gateway (x1.x1.x1.x1
) and those of the remote one (x2.x2.x2.x2
).
To set up network connectivity with IPsec gateways, use one of the following methods: