<p>I have a softether Vpn server hosted on ubuntu server 16.04, I can connect to the vpn from other linux/windows machines. My goal is to use the vpn only for Kubernetes networking or when the server is making a web request. but I don't want to use the vpn to expose my nodePorts/Ingress/loadbalancers. I want to use the default adapter (eth0) to exposes those. I am not an linux expert or a network engineer. Is this possible? If yes, please help. thanks </p>

<p>Ingress controllers and loadbalancers usually rely on the NodePort functionality which in turn relies on Kubernetes network layer. Kubernetes has some network <a href="https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin" rel="nofollow noreferrer">requirements</a> to ensure all its functionalities work as expected. </p>

<p>Because SoftEther VPN <a href="https://www.softether.org/1-features/2._Layer-2_Ethernet-based_VPN" rel="nofollow noreferrer">supports</a> Layer2 connectivity it's possible to use it for connecting cluster nodes. </p>

<p>To limit its usage for NodePorts and LBs you just need to ensure that nodes on other side of the VPN haven't been included in the LB pool used for traffic forwarding to NodePort services which may require <a href="https://docs.aws.amazon.com/cli/latest/reference/elb/create-load-balancer.html" rel="nofollow noreferrer">managing</a> LB pool <a href="https://docs.aws.amazon.com/elasticloadbalancing/latest/application/tutorial-application-load-balancer-cli.html" rel="nofollow noreferrer">manually</a> or use <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-elb.html" rel="nofollow noreferrer">CloudAPI</a> call from some scripts.</p>

<p>Ingress controllers are usually exposed by NodePort also, so the same thing here.</p>
