Creating a ZeroTier-to-Amazon-VPC Gateway

Follow

Comments

3 comments

  • Avatar
    shemsargent

    Thank you very much! This looks very usable.

  • Avatar
    Adam Ierymenko

    Before route management this could be done with bridging and hacks on the Amazon side (ebtables!) to make it look like a true L2 network instead of Amazon's fake one, but this was painful. This is indeed a lot easier, which is why we decided to write it up now.

  • Avatar
    groep14

    I've tried the same thing with DigitalOcean, unfortunately I can't get it to work and I found the following: Unfortunately, this configuration will not work due to the anti-spoofing ruleset we have in place to protect your droplets. You're correct that everything works on the way out, but where this gets caught is in the return path from the gateway droplet to your private IP only droplet. Since it the gateway box is attempting to send a packet that has a different source address from itself, it will not be allowed through. (source= https://www.digitalocean.com/community/questions/nat-gateway-on-digital-ocean-s-droplet-possible)

Please sign in to leave a comment.