Manage VPN

This page explains how to manage CloudRaya VPN, including enabling or disabling VPN access, viewing connection details, and managing VPN users.

CloudRaya VPN allows secure access to private resources inside your VPC, such as Virtual Machines, as well as the private internal network of a Kubernetes cluster, using encrypted connectivity.

What You Can Do on This Page

From the VPN management page, you can:

• Enable or disable VPN access
• View VPN Public IP and Pre-Shared Key (PSK)
• Create VPN users
• Remove VPN users when no longer needed

Accessing VPN Management

To manage VPN:

1. Open the CloudRaya Control Panel
2. Navigate to Dashboard → Network → VPN
3. Select the Region

The VPN List can show multiple entries for that region: one for each VPC with active resources, and one for each Kubernetes cluster (labeled K8S - <cluster name>). VPCs with no active resources do not appear.

Enable or Disable VPN

VPN must be enabled before users can connect. Each entry (VPC or Kubernetes cluster) has its own Online/Offline toggle.

Enable VPN

• Select the entry (a VPC or a Kubernetes cluster)
• Switch its toggle to Online
• The system will generate:
  • VPN Public IP
  • Pre-Shared Key (PSK)

Once enabled, VPN users can be created.

Disable VPN

• Switch the entry's toggle to Offline
• All VPN connections will be terminated
• VPN users remain stored but cannot connect until VPN is re-enabled

Use this option when VPN access is temporarily not required.

View VPN IP and Pre-Shared Key

After VPN is enabled, CloudRaya provides:

• VPN Public IP
  Used as the VPN server address

• Pre-Shared Key (PSK)
  Used for IPsec authentication

To view the PSK:

• Click Get Key
• The PSK will be revealed and can be copied securely

Keep this information confidential.

Add VPN User

VPN users are used to authenticate client devices.

Create a VPN User

To add a new user:

1. Click Add User
2. Enter:
   • Username
   • Password
3. Save the configuration

Notes:

• VPN users are managed per region and can be reused across multiple VPCs and Kubernetes clusters within that region
• VPN users cannot be used across different locations
• VPN must be enabled before adding or removing users

Delete VPN User

Remove VPN users when access is no longer required.

Delete a User

1. Open the VPN user list
2. Select the user
3. Click Delete

Deleting a VPN user:

• Immediately revokes VPN access
• Does not affect VPCs or Virtual Machines
• Does not impact other VPN users

Important Behavior and Limitations

• A VPC-based VPN entry is tied to that VPC's router; a Kubernetes-based VPN entry is tied to that cluster's own private network instead
• A VPC appears in the VPN list only if it has active resources
• For Kubernetes clusters, VPN provides access to the cluster's private internal network (such as node private IPs), it is not required to reach the cluster's API server, which is public by default
• VPN provides private network access, not public internet routing
• VPN is not a commercial VPN service

Common Use Cases

Use CloudRaya VPN when you need to:

• Access VM private IPs securely
• Manage infrastructure without exposing services publicly
• Connect from office or home networks
• Perform administration and troubleshooting safely

Related Pages

📄 Virtual Private Cloud (VPC)

📄 Connect to CloudRaya VPN

📄 Connect to CloudRaya VPN on Windows

📄 Connect to CloudRaya VPN on Linux

📄 Connect to CloudRaya VPN on macOS