NIC1 is connected to the “VM Network” and has Internet access through the home network.PfSense will provide DHCP, DNS, NAT, and routing/default gateway services only to the clients on the internal host-only network.īecause of the way it is designed, no other router can sit between Google Wi-Fi and the internet without some loss of functionality, including mesh networking, and we do not want to disturb the other users of the network (family), so we will create an isolated network with pfSense on the ESXi host. The host-only network will have no physical uplinks so the only way out to the Internet or the private cloud network is through the pfSense router. Since Google Wi-Fi does not have any VPN capabilities, I intend to use a pfSense virtual appliance in ESXi to act as a router for virtual machine clients on an internal ESXi host-only network. Since switching to a full-time focus on cloud engineering and architecture, one of the things I’ve always wanted to try is to set up a Site-to-Site IPsec VPN tunnel with BGP between my home and a virtual private cloud (VPC) network to better understand the customer experience for VPN configuration and network management.Īs I mentioned earlier, Google Wi-Fi is rather basic and doesn’t offer any VPN capability, but it can do port forwarding, and when combined with a virtual appliance, that’s all we really need. I run a few VMs when I need to, but nothing “production”. It runs a standalone instance of VMware ESXi 7.

My home lab is a simple Intel NUC with a dual-core Intel Core i3-6100U 2.3 GHz CPU and 32 GB RAM. Most importantly, it delivers a reliable experience for the family. However, it doesn’t provide all the bells and whistles that some of the more advanced home routers offer, but this can be a blessing in disguise because there is less to fiddle with and potentially mess up. Once deployed, it can generally be thought of as “set it and forget it”. Google Wi-Fi is great – it’s very easy to get started. When we built the house in 2015, I set up a 3-pack of original Google Wi-Fi (not the “Nest” version) to use as my router and access points throughout the house. What follows is a guide inspired by Configure Google Cloud HA VPN with BGP on pfSense but customized for a Google Wi-Fi home network and updated with some pfSense changes that I had to figure out. I’ve always wanted to set up a Site to Site VPN between a cloud provider and my home network.

Mac ipsec vpn client pfsense