search

aws-samples / vpn-gateway-strongswan

AWS CloudFormation template to deploy the open source strongSwan VPN solution to act as a VPN gateway in support of site-to-site VPN connections.
Apache License 2.0
68 stars 37 forks source link

Parameter-driven source IP masking #2

Open ckamps opened 4 years ago

ckamps commented 4 years ago

Provide a parameter to automatically configure source IP address translation for traffic leaving the strongSwan VPN gateway so that remotely sourced traffic can be routed beyond the local VPC via, for example, either an Internet Gateway or NAT Gateway. See the Advanced Usage section of the README.md for manual configuration instructions.

See https://fedoraproject.org/wiki/How_to_edit_iptables_rules for examples of how to persist iptables rules.

Automating and persisting this configuration will require installation of the following package and enablement of the iptables service:

$ sudo yum install iptables-services

$ sudo systemctl enable iptables.service