VPN is not needed and not recommended.  The database connection is encrypted over internet.