Building Highly Available VPNS using Open Source Tools
As Linux scales it's way into the enterprise, things like
high availabilty and redundancy become more and more important.
This paper deals with both the concepts and the implementation
of building an enterpise grade VPN, using various applications,
protocols and tools to add redundancy at each layer.
We will build and demo an HA setup using:
- Zebra (BGPv4)
- GRE (Generic Routing Encapsulation)
- FreeS/WAN (IPSec)
- Heartbeat (from Linux-ha.org)
We'll cover the built in enterprise features of each application/protocol,
and how to put them together into a high availability setup.