Scarab

Scarab updates a Cloud VPN peer gateway with the IP address provided. The intended use case is to re-establish a site-to-site VPN when a dynamic IP address changes.

The name comes from the Golden Scarab in the story about syncronicity.

Use case

• CenturyLink Gigabit internet with PPPoE dynamic IP.
• Ubiquiti EdgeRouter-4 v2.0.8 firmware (mips64 GNU/Linux)
• Google Cloud VPN HA - IKEv2 tunnel with BGP dynamic routing.

IAM Roles

The service account used by Scarab needs the following roles assigned:

Compute Network User

roles/compute.networkUser is required to grant the compute.externalVpnGateways.list permission to list VPN Gateways.

Roadmap

• Make scarab version read a common semantic version
• Add scarab list to list peer gateways
• Add scarab create to create a tunnel
• Add scarab delete to create a tunnel
• Add scarab update to update an existing tunnel
• Design how to handle the tunnel preshared key