VPN client

Question 1

VPN Client

Client VPN is what technology?

Answer 1

OpenVPN (just like RDS MySQL is real MySQL under the hood)

Question 2

VPN Client

What do you connect to?

Answer 2

A Client VPN Endpoint

Question 3

VPN Client

What are endpoints associated with (and how many)?

Answer 3

One Client VPN Endpoint associated with ONE VPC.

Question 4

VPN Client

What is the Client VPN Endpoint associated with in your VPC?

Answer 4

No more than 1 subnet per AZ

Question 5

VPN Client

What’s the charge structure for Client VPN?

Answer 5

Number of associated Subnets + hourly charge per connected client

Question 6

VPN Client

How does Client VPN handle client authentication?

Answer 6

You provide an identity provider

Question 7

VPN Client

Help! I think someone is using this that shouldn’t…

Answer 7

Look in CloudWatch Logs for access logs

Question 8

VPN Client

How is client VPN traffic treated in a VPC?

Answer 8

It all appears in the Client VPN ENI and is routed normally from there.

Question 9

VPN Client

What happens on the client when the connection is established?

Answer 9

Client route table completely replaced by Client VPN route table.

Question 10

VPN Client

What’s the effect to local traffic when you connect to a Client VPN?

Answer 10

Usually completely stopped: Client VPN RT takes over, so lose local routes.

Question 11

VPN Client

What’s the effect of a split tunnel vpn?

Answer 11

Local traffic stays local, VPN traffic uses the VPN

Question 12

VPN Client

What’s the default behavior for local traffic after connecting to Client VPN?

important

Answer 12

100% of traffic routes to VPN (split tunnel off by default)

Cantrill: important for exam, the DEFAULT is non-split tunnel