VPN Security

Status: VERIFY

Current state

The gateway uses a VPN to reach backend infrastructure.

Required documentation

• VPN implementation: TODO
• key type: TODO
• per-device key: TODO
• routes available to device: TODO
• server-side network policy: TODO
• credential rotation: TODO
• revocation: TODO

Security requirement

A single compromised device or VPN key must not provide unrestricted access to the backend network or other gateways.