Softether cluster members working with Privae subnet

[suddhasilsarkar]

Hi Everyone,
I need some help, I had setup soft-ether cluster in AWS behind NLB. All traffic going into NLB --> softether controller and post authentication the session established with one of the member server in the cluster. In this pattern I had to keep my SE client open communication to the member server's public IP as well ( I had to keep the cluster in public Subnet ). This is a challenge from security standpoint , and some limitation on client side. I would like to know if I am missing anything here, is there anyway i can configure so that client only establish connection with NLB (ip) and no need to open communication to individual softehter cluster's member nodes ?
Thank you for all help as always, and please let me know if any questions.

Thanks
SS

[suddhasilsarkar]

Hi All,
Can anyone came across this and let me know please ?

Thanks
SS

[solo]

You're asking lots of rhetorical questions.

Clusters servers must be on public IP as well. Cluster controller is not a relay server or a reverse proxy. It just randomly picks a server and sends its address and port to the client.

viewtopic.php?p=96022#p96022

RTFM
https://www.softether.org/4-docs/1-manual/3/3.9
https://www.softether.org/4-docs/1-manual/A/10.8
https://www.softether.org/4-docs/1-manual/1/1.7

[suddhasilsarkar]

Hi Team,
I am coming back again, I could see that 10K user limit per hub is a hard limit, is there any other solution I can use to go beyond 10K per HUB in the Softether VPN server ?
Thanks in advanced for any help around this.

Thanks
SS

[solo]

No.