I am working on configuring an expandable Ubuntu Cluster to host several Riak Database Nodes. These nodes need limited ports open to talk amongst each other, but only to other nodes in that private network.
To interface with this server, I will have a load balancer that will evenly distribute requests among the nodes. This load balancer should be the only public accessible node. Additionally I must use the load balance node as a 'bastion' node to access the others via SSH.
I know this is possible by doing extensive IP table configuration on each node, but I am hoping to automate the creation and configuration of new nodes within the VPN, and doing several IP table commands on new nodes, than having to configure each existing node to trust the new one is quite a bit of overhead, and I think there is a better way to solve the issue.
Is there a way to set up a Virtual private network, where nodes can inherit those type of permissions from the network, and have traffic routed accordingly.
Sorry, only experience with VPNs here is using them to circumvent netflix blocks when I moved to Tokyo.