3 ms·
The guide advocates an EC2 security group that allows everything, plus disabling the Windows firewall. That's quite insecure, and unnecessary. It's probably be
by Wilya 11y ago
The guide advocates an EC2 security group that allows everything, plus disabling the Windows firewall. That's quite insecure, and unnecessary.
It's probably better, and not more work, to create a security group that only allows:
* UDP on port 1194 (Openvpn server)
* TCP on port 3389 (Remote Desktop)
* ICMP (for ping)
- micro-ram 11y agoIs Openvpn even necessary? Open 3389 to only your IP address in the security group.
- orik 11y agoyou're not playing over rdp; that would be terrible. you're using steam in-home streaming through the vpn.
- davb 11y agoYeah, using OpenVPN allows your client and server to reside on the same subnet, which I presume is necessary for Steam In-Home Streaming.
- jmiwhite 11y agoFor this setup, yes - a VPN is necessary to use Steam's inbuilt streaming feature.
- halotrope 11y agoYou need the openVPN for the Steam IHS Lan discovery and upd streaming. With my setup I still use Hamachi which also does the job and was much easier to configure. Downside is that it is proprietary and has phases with extreme paket loss which make playing impossible every now and then.
- tedchs 11y agoThe idea is OpenVPN enables IP multicast to be tunneled over the public Interent, which Steam's streaming requires.
- lnanek2 11y agoAren't you leaving out all the networking by the games by doing that? My college was famous for blocking multiplayer starcraft games a new way every week and us students finding a way around it every week. Kind of sad Blizzard eventually sued the B.NET replacement that was needed due to crappy filtering like that.
- Wilya 11y agoIn most cases, this shouldn't pose any issues (though some games doing crazy things with networking could be affected). These rules restrict the ports listening directly on the internet. The average gaming PC is behind a home router, has no ports reachable from the internet, and network games still work fine. If your college was like mine, what they did was filtering outbound connections, which is different. Outbound traffic is unfiltered by default on EC2, and it's fine to leave it that way.
- lewisl9029 11y agoIt's probably not a good idea to play any competitive multi-player games on this service anyways, considering the additional latency and higher possibility of interruptions.