{"id":215,"date":"2022-10-16T12:06:55","date_gmt":"2022-10-16T06:36:55","guid":{"rendered":"https:\/\/blogs.shydrate.com\/?p=215"},"modified":"2022-10-16T12:09:28","modified_gmt":"2022-10-16T06:39:28","slug":"accessing-rds-instance-through-open-vpn","status":"publish","type":"post","link":"https:\/\/blogs.shydrate.com\/index.php\/2022\/10\/16\/accessing-rds-instance-through-open-vpn\/","title":{"rendered":"Accessing RDS instance through Open-vpn"},"content":{"rendered":"\n

This blogs deals with AWS RDS setup and Openvpn. Due to lots of cybersecurity threats going on we have to keep our RDS\/DB’s very secure to avoid any threats for our data. <\/p>\n\n\n\n

While creating RDS instance, we have the option of keeping the instance public or private. Now how to access instance if we keep it private. Its always recommended to keep RDS\/DB private, but how to do so.<\/p>\n\n\n\n

In this setup, 1 – vpc is present which has both public and private subnets, 1 -RDS instance which is deployed on private subnet of the same vpc along with public_accessible=false<\/code> and 1 – Ec2 instance which is delpoyed on public subnet of the same vpc.<\/p>\n\n\n\n

Reference:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Now, in order to setup rds instance and vpc, you can either go through aws console or terraform(IaC). I have used terraform.<\/p>\n\n\n\n

Steps:<\/p>\n\n\n\n

  1. Create vpc.<\/li>
  2. Create ec2-instance and install openvpn-server on it.<\/li>
  3. Create RDS instance.<\/li><\/ol>\n\n\n\n

    Attached screenshots for POC:<\/p>\n\n\n\n

    1. terraform apply output<\/li>
    2. terraform output<\/li>
    3. ec2 openvpn from aws console<\/li>
    4. openvpn-client<\/li>
    5. db-client<\/li><\/ol>\n\n\n\n
      \"\"<\/figure>\n\n\n\n
      \"\"<\/figure>\n\n\n\n
      \"\"<\/figure>\n\n\n\n
      \"\"<\/figure>\n\n\n\n
      \"\"<\/figure>\n\n\n\n

      Reference:<\/p>\n\n\n\n

      Repo: link<\/a><\/p>\n\n\n\n

      Openvpn_setup: link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

      This blogs deals with AWS RDS setup and Openvpn. Due to lots of cybersecurity threats going on we have to keep our RDS\/DB’s very secure to avoid any threats for our data. While creating RDS instance, we have the option<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[47,49,48,50,46],"class_list":["post-215","post","type-post","status-publish","format-standard","hentry","category-my-articles","tag-aws-rds","tag-iac","tag-openvpn","tag-rds-public-off","tag-terraform"],"_links":{"self":[{"href":"https:\/\/blogs.shydrate.com\/index.php\/wp-json\/wp\/v2\/posts\/215","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.shydrate.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.shydrate.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.shydrate.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.shydrate.com\/index.php\/wp-json\/wp\/v2\/comments?post=215"}],"version-history":[{"count":3,"href":"https:\/\/blogs.shydrate.com\/index.php\/wp-json\/wp\/v2\/posts\/215\/revisions"}],"predecessor-version":[{"id":229,"href":"https:\/\/blogs.shydrate.com\/index.php\/wp-json\/wp\/v2\/posts\/215\/revisions\/229"}],"wp:attachment":[{"href":"https:\/\/blogs.shydrate.com\/index.php\/wp-json\/wp\/v2\/media?parent=215"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.shydrate.com\/index.php\/wp-json\/wp\/v2\/categories?post=215"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.shydrate.com\/index.php\/wp-json\/wp\/v2\/tags?post=215"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}