AWS Client VPN

awsVPN gatewayaws-client-vpn

Managed remote-access VPN for OpenVPN/TLS client sessions.

Provider
aws
Category
Edge
Properties · 3 set by this component
propertytypevaluesrequiredkind defaultthis component
activeActiveboolean—nofalseinherited
bgpboolean—nofalseinherited
connectionLogging · component propertyboolean—nofalseinherited
defaultAuthorizationRules · component propertyboolean—nofalseinherited
ipAddressType · component propertyenumipv4 | ipv6 | dualstacknoipv4inherited
managedboolean—nofalse▸ true
peerTypeenumsite-to-site | point-to-site | cloud-to-cloudno—▸ point-to-site
splitTunnel · component propertyboolean—nofalseinherited
throughputMbpsinteger—no—inherited
transportPort · component propertyinteger—no443inherited
tunnelTypeenumipsec | ssl | wireguardno—▸ ssl
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "client-vpn", component: "aws-client-vpn" }
Other VPN gateway products · 18
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# AWS Client VPN: managed remote-access VPN terminating OpenVPN/TLS client sessions.
# "What is AWS Client VPN?" + "Split-tunnel on AWS Client VPN endpoints": TLS over port 443 by default,
# split-tunnel off so all client traffic crosses the tunnel, and no authorization rules exist until you add them.
schemaVersion: "1"
type: "component"
id: "aws-client-vpn"
kind: "vpn-gateway"
provider: "aws"
docs: "https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/what-is.html"
defaults:
  managed: true
  peerType: "point-to-site"
  tunnelType: "ssl"
properties:
  splitTunnel:
    type: "boolean"
    default: false
  transportPort:
    type: "integer"
    default: 443
  defaultAuthorizationRules:
    type: "boolean"
    default: false
  connectionLogging:
    type: "boolean"
    default: false
  ipAddressType:
    type: "enum"
    values: ["ipv4", "ipv6", "dualstack"]
    default: "ipv4"

The same page as markdown, for an agent: /catalogue/components/aws-client-vpn.md