You will need 2 VPCs. The Internet VPC will have the Internet Gateway and the OpenSwan EC2 instance. The Project VPC will have your application or Kubernetes cluster.
- VPC CIDR: 10.230.30.0/24
- Private Subnet: 10.230.30.128/25 - Route Table with 0.0.0.0/0 to NAT
- Public Subnet: 10.230.30.0/25 - Route Table with 0.0.0.0/0 to IGW, 10.224.36.0/23 to OpenSwan Instance
- NAT Gateway in the public subnet with an IP of 22.214.171.124