Forge Home

Modules

Puppet

Resources

PuppetEcosystemPuppet CommunityUpdates

android_ec2_vpn

L2TP/IPSec PSK VPN server for single Android user
Project URLRSS Feed

10,401 downloads

9,946 latest version

3.3 quality score

We run a couple of automated
scans to help you access a
module's quality. Each module is
given a score based on how well
the author has formatted their
code and documentation and
modules are also checked for
malware using VirusTotal.

Please note, the information below
is for guidance only and neither of
these methods should be considered
an endorsement by Puppet.

Support the Puppet Community by contributing to this module

You are welcome to contribute to this module by suggesting new features, currency updates, or fixes. Every contribution is valuable to help ensure that the module remains compatible with the latest Puppet versions and continues to meet community needs. Complete the following steps:

  1. Review the module’s contribution guidelines and any licenses. Ensure that your planned contribution aligns with the author’s standards and any legal requirements.
  2. Fork the repository on GitHub, make changes on a branch of your fork, and submit a pull request. The pull request must clearly document your proposed change.

For questions about updating the module, contact the module’s author.

Version information

  • 2.1.1 (latest)
  • 1.0.1
  • 1.0.0
released Jan 27th 2014

Start using this module

  • r10k or Code Manager
  • Bolt
  • Manual installation
  • Direct download

Add this module to your Puppetfile:

mod 'inkblot-android_ec2_vpn', '2.1.1'
Learn more about managing modules with a Puppetfile

Add this module to your Bolt project:

bolt module add inkblot-android_ec2_vpn
Learn more about using this module with an existing project

Manually install this module globally with Puppet module tool:

puppet module install inkblot-android_ec2_vpn --version 2.1.1

Direct download is not typically how you would use a Puppet module to manage your infrastructure, but you may want to download the module in order to inspect the code.

Download
Tags: ec2, vpn, android, ipsec, l2tp, racoon, xl2tpd

Documentation

inkblot/android_ec2_vpn — version 2.1.1 Jan 27th 2014

android_ec2_vpn

Overview

IPsec is a total pain in the ass, and Android devices are finicky about their VPN servers. Add that with EC2 both the server and the device are NATted, and... well... you have trouble sleeping.

Inspiration

There are lots of fun tutorials and war stories about how to set this up. Here are the ones that guided me:

I probably missed some (in addition, of course, to the google+ post I can find any more about incorrect/missing SPD entries when the server is NATted). Many thanks to the Internet.

How to use it

Server

The VPN server is an EC2 instance. Start one up with a security group that has these ports open for inbound traffic:

  • TCP port 22
  • TCP port 500
  • UDP port 500
  • UDP port 4500

Install this module using the command puppet module inkblot/android_ec2_vpn. This will ensure that all of its dependencies are satisfied.

Using puppet and this module, apply something like this on the server:

class { 'android_ec2_vpn':
    username       => 'guesswho',
    password       => 'qwertyuiop',
    pre_shared_key => 'asdfghjkl;',
}

Client

The VPN client is an Android device. Create a new VPN connection:

  • Name it whatever you want
  • Set type to: L2TP/IPSec PSK
  • Set the Server address to the EC2 instance's public IP
  • Leave L2TP secret blank
  • Leave IPSec identifier blank
  • Set the IPSec pre-shared key to the value of pre_shared_key parameter you used with the puppet class.

When you tell your device to connect, it will prompt for a username and password. Use the username and password parameter values that you used with the puppet class.