Project

cfn-vpn

0.01
No commit activity in last 3 years
No release in over a year
cfn-vpnbase2services/aws-client-vpnHomepageDocumentationSource CodeBug TrackerWiki
creates and manages resources for the aws client vpn
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
 Popularity
Downloads
34,435
Stars
3
Forks
4
Watchers
5
 Releases
Current version
1.5.0
Total releases
24
First release
2019-06-21
Latest release
2023-02-08
 Development
Primary Language
Python
Licenses
MIT
Average date of last 50 commits
2019-06-19
Reverse Dependencies
0

 Dependencies

Development

bundler
~> 2.0
rake
~> 13.0

Runtime

aws-sdk-acm
~> 1, < 2
aws-sdk-cloudformation
~> 1, < 2
aws-sdk-ec2
~> 1.95, < 2
aws-sdk-s3
~> 1, < 2
aws-sdk-ssm
~> 1, < 2
cfndsl
~> 1, < 2
netaddr
= 2.0.4
terminal-table
~> 1, < 2
thor
~> 0.20
rubyzip
~> 2.3
 Project Readme

aws-client-vpn

Requirements

  • python 3
  • boto3
  • docker

Scripts

client-vpn.py

  • generate the certicates using OpenVPN easy-rsa in the output directory
  • uploads the certificates to ACM and tags them
  • creates the vpn endpoint required resources using cloudformation
usage: client-vpn.py [-h] [--verbose] --server-cn SERVER_CN
                     [--client-cn CLIENT_CN] --name NAME --subnet-id SUBNET_ID
                     [--cidr CIDR]

optional arguments:
  -h, --help            show this help message and exit
  --verbose             increase output verbosity
  --server-cn SERVER_CN
                        common name for the server certificate
  --client-cn CLIENT_CN
                        common name for the server certificate
  --name NAME           stack and environment name the vpn
  --subnet-id SUBNET_ID
                        SubnetId to which the vpn will assocate with
  --cidr CIDR           CIDR the vpn will give to the clients

get-vpn-config.py

  • gets the id of the client vpn endpoint
  • downloads the client config file into the output directory
  • alters the hostname in the config with a random string
usage: get-vpn-config.py [-h] [--verbose] --name NAME [--region REGION]

optional arguments:
  -h, --help       show this help message and exit
  --verbose        increase output verbosity
  --name NAME      stack and environment name the vpn
  --region REGION  aws region the vpn exists

Setup

  1. Clone the repo

  2. Get the id of the subnet you wish to associate the vpn with

  3. Run the client-vpn.py script with the following required options

./client-vpn.py --server-cn=vpn.domain.tld --name ciinabox --subnet-id ${SubnetId}

  1. Run the get-vpn-config.py script to download the config file

  2. copy the config file and the client certificate and key to a local secure directory

  3. modify the config paths for the cert and key

  4. open the config in your favourite vpn client