a day ago
- The author wanted to learn about AWS VPN services and attempted to set up a Site-to-Site VPN and Client VPN between their Unifi lab network and AWS account.
- The USG (Unifi Security Gateway) failed to connect to the AWS Virtual Private Gateway due to an encryption cipher mismatch: AWS requires AES-256-GCM, but the USG only supports AES-256-CBC.
- The root cause is Ubiquiti's outdated OpenVPN version (2.3.2) in their OS, which lacks AES-256-GCM support, despite known CVEs and community requests for updates.
- Frustrated with the lack of support and control over dependencies, the author decided to migrate from Ubiquiti to Pfsense.