Kvindo™ Cloud Docs
OpenVPN User Settings is a reusable routing and access-control profile. It decides which traffic a connected client sends through the VPN and which it keeps on its normal connection — a split tunnel. Attach one or more settings profiles to an OpenVPN User.
• Allowed — IP ranges (allowedIpV4Cidrs/allowedIpV6Cidrs) and domains (allowedDomains) that are routed through the VPN
• Denied — IP ranges (deniedIpV4Cidrs/deniedIpV6Cidrs) and domains (deniedDomains) explicitly excluded from the VPN
• Split vs full tunnel — list the VPC CIDR under allowed for a split tunnel, or 0.0.0.0/0 for a full tunnel. Nothing is routed through the VPN unless it is listed under allowed — an empty allowed list routes no traffic at all
| UI Name | API / kc name | Terraform name | Optional | Format | Default | Is read only | Description |
|---|---|---|---|---|---|---|---|
| Allowed IPv4 CIDRs | spec.allowedIpV4Cidrs |
spec.allowed_ipv4_cidrs |
Yes | list of CIDR strings | [] |
No | IPv4 ranges routed through the VPN |
| Allowed IPv6 CIDRs | spec.allowedIpV6Cidrs |
spec.allowed_ipv6_cidrs |
Yes | list of CIDR strings | [] |
No | IPv6 ranges routed through the VPN. IPv6 is not yet implemented — reserved for future use |
| Allowed domains | spec.allowedDomains |
spec.allowed_domains |
Yes | list of strings | [] |
No | Domains routed through the VPN |
| Denied IPv4 CIDRs | spec.deniedIpV4Cidrs |
spec.denied_ipv4_cidrs |
Yes | list of CIDR strings | [] |
No | IPv4 ranges excluded from the VPN |
| Denied IPv6 CIDRs | spec.deniedIpV6Cidrs |
spec.denied_ipv6_cidrs |
Yes | list of CIDR strings | [] |
No | IPv6 ranges excluded from the VPN. IPv6 is not yet implemented — reserved for future use |
| Denied domains | spec.deniedDomains |
spec.denied_domains |
Yes | list of strings | [] |
No | Domains excluded from the VPN |
A split-tunnel profile: only the VPC's CIDR is routed over the VPN, everything else goes out over the client's normal connection.
Terraform
Python SDK
kc CLI
Resource docs
Examples