Skip to main content

Connect to H2O Managed Cloud using site-to-site VPN

This tutorial guides you through the steps to establish a site-to-site VPN connection with H2O Managed Cloud.

info

To route traffic to the managed cloud environment via the VPN connection, you must maintain private DNS records pointing to the IPs supplied by H2O, in your environment.

Configure VPN connection​

  1. Reach out to your H2O representative or H2O support and request to set up a VPN connection to your H2O Managed Cloud environment.

  2. H2O will provide the CIDR (IPv4 address space) of the H2O Managed Cloud environment. Once you have received it, proceed to step 3.

  3. Create a VPN Gateway for the VPN and provide the following details to H2O:

    • VPN Gateway Address
    • CIDR/CIDRs of your on-premises network

  4. Next, H2O will create the VPN Tunnels and provide a text file with the load balancer information for private DNS creation.

    Example
    ==================== Load Balancer Information ====================
    DNS Names, IPs, and Ingress Domains:
    Service Name: a
    Load Balancer DNS Name: vpn-a-12345-12345.elb.us-east-1.amazonaws.com
    DNS Record Name: a.12345.h2o.ai
    IP: X.X.X.X
    IP: X.X.X.X
    Service Name: b
    Load Balancer DNS Name: vpn-b-12345-12345.elb.us-east-1.amazonaws.com
    DNS Record Name: b.12345.h2o.ai
    IP: X.X.X.X
    IP: X.X.X.X
    Service Name: c
    Load Balancer DNS Name: vpn-c-12345-12345-east-1.amazonaws.com
    DNS Record Name: 12345.h2o.ai, *.12345.h2o.ai
    IP: X.X.X.X
    IP: X.X.X.X

    ==================== Tunnel Information ====================
    Tunnel 1 IP: X.X.X.X
    Tunnel 1 Pre-shared Key: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    Tunnel 2 IP: X.X.X.X
    Tunnel 2 Pre-shared Key: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

You can use the provided Tunnel IP and Tunnel Pre-shared Key to set up the site-to-site VPN connection with Azure or GCP.

Feedback