search

trailofbits / algo

Set up a personal VPN in the cloud
https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-that-works/
GNU Affero General Public License v3.0
28.69k stars 2.32k forks source link

Using Reserved IPs on DigitalOcean #14566

Open magician11 opened 1 year ago

magician11 commented 1 year ago

I created a droplet from algo on DigitalOcean, and used the assigned IP address to access work related things. That IP address was whitelisted for us.

Something happened to the droplet, and I could no longer connect to it. So I thought of spinning up another droplet with algo, and re-assigning the IP address from the previous droplet. Turns out you can't do that.

DigitalOcean does have a service called Reserved IPs. Once a droplet is created, you can assign a reserved IP to it, and then re-assign that IP to future droplets.

So one possibility I thought would be to create a droplet on DigitalOcean from algo (which would give me some random IP address) whenever there was an issue, and re-assign the reserved IP.

The only part I'm unclear of, is if I re-assign a reserved IP to my droplet, what do I need to change on that newly created algo droplet with regard to the reserved IP? Firewalls? SSH access? Is too much of a hassle to spin up a new droplet, and re-assign a reserved IP, than try and fix one that is glitching?

manofaffairs commented 5 months ago

Reviving this dead thread, but I just dealt with this myself. By default, the droplet will not send out data via the reserved IP.

This Digital Ocean support page will describe how to direct your droplet's outbound traffic over the assigned reserved IP, which will serve your purpose. Note that you'll want to follow the instructions for "Persist outbound reserved IP traffic after reboot.