Cloud VPN config generator
Builds the on-premises side of a managed cloud tunnel, with matching IKE/IPsec parameters and a Terraform snippet for the cloud side.
Virtual private gateway or transit gateway
Your on-premises autonomous system number
Link-local transit range for BGP peering
Parameters this provider expects
- IKE proposal
- aes256-sha256-modp2048
- ESP proposal
- aes256-sha256-modp2048
- DH group
- Group 14 (2048-bit MODP)
- Lifetimes
- IKE 28800s / IPsec 3600s
AWS creates two tunnels per connection. Build both for redundancy — the second uses its own PSK and inside CIDR.
Enter the cloud gateway address
Create the VPN gateway in your cloud console first — the provider allocates its public IP, and you paste it here.
Keep the pre-shared key out of version control
The Terraform snippets reference variables rather than inlining the secret, because Terraform state stores values in plain text. Supply it through a secret manager or a tfvars file you never commit.
Generated locally, stored nowhere
Keys and passwords come from your browser's crypto RNG. Nothing you type or generate is sent to a server, written to storage, or recoverable by anyone once you close this tab.