Connect Linux Server to Alibaba Cloud VPC via IPsec VPN (Guided)

Scenario Description

Configure IPsec on a Linux server to establish a secure tunnel over the public network connecting to an Alibaba Cloud VPC. Typical use cases: edge servers, lightweight servers, Wuying cloud desktops, and edge nodes establishing secure tunnels via public network to access Alibaba Cloud VPC internal resources.

Architecture: Linux Server (StrongSwan) ←IPsec Dual Tunnel→ VPN Gateway → VPC + VSwitch + Security Group

Preparation

Requirements:

• Linux server with public IP (NAT supported) and SSH key authentication
• Network: UDP 500/4500, ESP, TCP 22 allowed to this Linux server
• Alibaba Cloud VPC

Resource provisioning is outside this skill's scope.

Pre-checks