rkhozinov

Creating a dynamic site-to-site VPN with OpenSwan on Ubuntu 10.04 on EC2

Wes Winham [email protected]

There are many tutorials floating around the web that almost get you a dynamic VPN in EC2. The goal of this tutorial is to be a one-stop-shop for this specific setup.

rkhozinov

VyOS AMI Customization

rl-system.init

comment-out followings

• update_interface_config
  to prevent new interface is added when stop/start instance in EC2 classic or create imaage with existing interface

• add_new_serial_if || log_failure_msg "can't add serial interfaces"
  no serial interface in EC2

vyatta-postconfig-bootup.script

rkhozinov

[ssh_connection]
ssh_args = -F ssh.cfg
control_path = ~/.ssh/mux-%r@%h:%p

rkhozinov

#include<stdio.h> 
#include<stdlib.h> 
#include<locale.h> 
#include<string.h> 
#include<windows.h> 

void insertion_sort(int *a,int t) //сортировка вставками
{
	int i,j,temp; 
	for (i=1;i<t;i++) 

rkhozinov

Server 2 sockets,6 cores each, 2.4ghz

# Set ixgbe options
# Limit RSS queues to the number of physical cores per cpu
# Disable offload
# When you change this, you need to run the command and reboot for it to take.
echo "options ixgbe LRO=0,0 MQ=1,1 RSS=6,6 VMDQ=0,0 vxlan_rx=0,0" > /etc/modprobe.d/ixgbe.conf

# Shut down HT cores
for i in $(seq 1 2 23); do

rkhozinov

# Virtual Tunnel Interface 
# 172.196.17.188 - 172.196.17.191 
set interfaces vti vti0 address 172.196.17.190/30
set interfaces vti vti0 description 'Virtual tunnel interface for VPN tunnel' 

# Phase 2 
set vpn ipsec esp-group ESP-Default compression 'disable' 
set vpn ipsec esp-group ESP-Default lifetime '3600' 
set vpn ipsec esp-group ESP-Default mode 'tunnel' 
set vpn ipsec esp-group ESP-Default pfs 'dh-group16' 

rkhozinov

#[test]
fn iter_demo() {
    let v1 = vec![1, 2, 3];
    let mut v1_iter = v1.iter();

    // iter() returns an iterator of slices.
    assert_eq!(v1_iter.next(), Some(&1));
    assert_eq!(v1_iter.next(), Some(&2));
    assert_eq!(v1_iter.next(), Some(&3));
    assert_eq!(v1_iter.next(), None);