The problem is that we want the data to be encrypted across all
networks, so a gateway with even a single cross-over cable connecting it
to the database server network is not acceptable. We are looking into
using OpenVPN on each of the databases servers now.

-steve

Milan Babuskov wrote:

> Steve Wiser wrote:
>
>> Ok, that does make a lot more sense. However I need to keep the traffic
>> encrypted to the end-point so I cannot use a VPN gateway which would
>> then forward the traffic across a network (even a small one). I could
>> do a VPN connection from the application server to each database server
>> I guess. What VPN software do you recommend?
>>
>
> If you can afford adding a dedicated machine at each end (old Pentium I
> with 64MB RAM would do quite nicely) I recommend M0n0wall with IPsec
> enabled:
>
> http://m0n0.ch/wall/
>
>
> The benefit is that you can easily mix it with other software or
> hardware based PPTP solutions.
>
>