Private Spaces can connect to other private networks via an IPSec VPN connection. This allows dynos to communicate with hosts on your private networks and vice versa. Traffic is encrypted over the public Internet.
Create a VPN connection
Use heroku spaces:vpn:connect to establish a connection. You must provide the public IP of your customer gateway and a comma-separated list of routable CIDRs.
Retrieve VPN configuration
To establish the connection, you must configure your VPN Gateway using the information from heroku spaces:vpn:config.
- VPN Gateway values: Use the IP addresses of the Private Space Tunnels provided.
- Customer Gateway value: Use the Public IP of your VPN Gateway.
- Authentication: Use the provided IKE Version and Pre-shared Keys.
Manage existing connections
- List connections:
heroku spaces:vpn:connections -s <space-name> - Get info:
heroku spaces:vpn:info <connection-name> -s <space-name> - Update CIDRs:
heroku spaces:vpn:update <connection-name> -c <comma-separated-cidrs> -s <space-name> - Destroy connection:
heroku spaces:vpn:destroy <connection-name> -s <space-name>
# Create a VPN connection
heroku spaces:vpn:connect vpn-connection-name --ip 35.161.69.30 --cidrs 172.16.0.0/16,10.0.0.0/24 --space my-space
# Get configuration details for your gateway setup
heroku spaces:vpn:config vpn-connection-name --space my-space