AWS Client VPN
Managed remote-access VPN for OpenVPN/TLS client sessions.
- Provider
- aws
- Kind
- VPN gateway
- Category
- Edge
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| activeActive | boolean | — | no | false | inherited |
| bgp | boolean | — | no | false | inherited |
| connectionLogging | boolean | — | no | false | inherited |
| defaultAuthorizationRules | boolean | — | no | false | inherited |
| ipAddressType | enum | ipv4 | ipv6 | dualstack | no | ipv4 | inherited |
| managed | boolean | — | no | false | ▸ true |
| peerType | enum | site-to-site | point-to-site | cloud-to-cloud | no | — | ▸ point-to-site |
| splitTunnel | boolean | — | no | false | inherited |
| throughputMbps | integer | — | no | — | inherited |
| transportPort | integer | — | no | 443 | inherited |
| tunnelType | enum | ipsec | ssl | wireguard | no | — | ▸ ssl |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "client-vpn", component: "aws-client-vpn" }VPN Gatewayalibaba-vpn-gatewayAWS Site-to-Site VPNaws-site-to-site-vpnAzure VPN Gatewayazure-vpn-gatewayNetBirdnetbirdOpenVPNopenvpnstrongSwanstrongswanSubmarinersubmarinerTailscaletailscaleGeneric VPN gatewayvpn-gatewayWireGuardwireguardZeroTierzerotierCloud VPNgoogle-cloud-vpnIBM Cloud VPN for VPCibm-vpn-gatewayClient VPN for VPCibm-vpn-serverSite-to-Site VPNoci-site-to-site-vpnNeutron VPNaaSopenstack-neutron-vpnaasClient Gatewayoutscale-client-gatewayVirtual Gatewayoutscale-virtual-gateway
# yaml-language-server: $schema=../../schema/component.schema.json # AWS Client VPN: managed remote-access VPN terminating OpenVPN/TLS client sessions. # "What is AWS Client VPN?" + "Split-tunnel on AWS Client VPN endpoints": TLS over port 443 by default, # split-tunnel off so all client traffic crosses the tunnel, and no authorization rules exist until you add them. schemaVersion: "1" type: "component" id: "aws-client-vpn" kind: "vpn-gateway" provider: "aws" docs: "https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/what-is.html" defaults: managed: true peerType: "point-to-site" tunnelType: "ssl" properties: splitTunnel: type: "boolean" default: false transportPort: type: "integer" default: 443 defaultAuthorizationRules: type: "boolean" default: false connectionLogging: type: "boolean" default: false ipAddressType: type: "enum" values: ["ipv4", "ipv6", "dualstack"] default: "ipv4"