Remote access to your cloudpipe instance from an OpenVPN client

Generate your certificates

Start by generating a private key and a certificate for your project:

$ nova x509-create-cert

Create the openvpn configuration file

The following template, which can be found under nova/cloudpipe/client.ovpn.template contains the necessary instructions for establishing a connection :

# NOVA user connection
# Edit the following lines to point to your cert files:
cert /path/to/the/cert/file
key /path/to/the/key/file

ca cacert.pem

client
dev tap
proto udp

remote $cloudpipe-public-ip $cloudpipe-port
resolv-retry infinite
nobind

# Downgrade privileges after initialization (non-Windows only)
user nobody
group nogroup
comp-lzo

# Set log file verbosity.
verb 2

keepalive 10 120
ping-timer-rem
persist-tun
persist-key             

Update the file accordingly. In order to get the public IP and port of your cloudpipe instance, you can run the following command :

$ nova cloudpipe-list

+----------------------------------+------------+-------------+---------------+
|            Project Id            | Public IP  | Public Port |  Internal IP  |
+----------------------------------+------------+-------------+---------------+
| d1f5d27ccf594cdbb034c8a4123494e9 | 172.17.1.3 | 1000        | 192.168.22.34 |
+----------------------------------+------------+-------------+---------------+
                            

Start your OpenVPN client

Depending on the client you are using, make sure to save the configuration file under the directory it should be, so the certificate file and the private key. Usually, the file is saved under /etc/openvpn/clientconf/client.conf

Download an OpenVPN client

In order to connect to the project's network, you will need an OpenVPN client for your computer. Here are several clients

Configure your client

In this example we will use Viscosity, but the same settings apply to any client. Start by filling the public ip and the public port of the cloudpipe instance.

These informations can be found by running a

$ nova cloudpipe-list

+----------------------------------+------------+-------------+---------------+
|            Project Id            | Public IP  | Public Port |  Internal IP  |
+----------------------------------+------------+-------------+---------------+
| d1f5d27ccf594cdbb034c8a4123494e9 | 172.17.1.3 | 1000        | 192.168.22.34 |
+----------------------------------+------------+-------------+---------------+