Remote Access - Adaptive VPN Service

Investigate existing VPN services capability in SKAO hardware. Look for options beyond that available in the in-built VPN client with a particular focus on using any role-based (group membership) and device-based controls.

Determine the VPN services and network accessibility required by all stakeholders taking into account networks individuals and their devices should NOT get access to as much as networks they should.

Define the needed technology for near-term and future requirements if this is beyond the capability of any identified interim solution. Bear in mind this is as much about capacity as it is complexity.

Consider how these technologies may need to be used starting from public, guest, wired and wireless networks (some of which may be "inside" the SKAO network (behind firewalls).

Continue the work started to expand the Mesh VPN solution between SKAO sites to encompass the AWS regions in use and investigate impacts to routing, charges and latency such a mesh would imply.