3 ms·
By VPN I mean something that can be used individually by developers from their own machine (is there a proper technical term for this type?), not static point t
by lobster_johnson 10y ago
By VPN I mean something that can be used individually by developers from their own machine (is there a proper technical term for this type?), not static point to point from a site such as an office (which is what CloudVPN seems made for).
We ended up setting up OpenVPN, which shouldn't be necessary. SSH is great and all, but when you add Kubernetes and other sensitive things like dashboards, you really want to virtualize everything and hide every internal service behind a proper, solid VPN gateway.
- boulos 10y agoI think you're saying you want something like our BeyondCorp setup: moving from the office to a coffee shop doesn't change that you're still the authenticated user that we trust, you're just on a sketchy network now. That's feasible but only things that do certificate exchange (https etc is easy enough). For what it's worth, part of the reason for Cloud Shell (the little shell within the web console) is so that you can interact with your infrastructure from inside the GCP network. That doesn't solve all your needs (like dashboards or deploying code from your laptop) but is often quite handy.
- MustardTiger 10y ago>is there a proper technical term for this type? Generally individual users connecting to a VPN are called road warriors, even if they're not on the road and always connect from the same place.
- lobster_johnson 10y agoNot type of developer, I mean type of VPN. :-)
- MustardTiger 10y agoYes, that's what I mean. It is called a roadwarrior VPN. As opposed to a point to point VPN.
- lobster_johnson 10y agoAh, okay. I've never heard that term before, except about people.