Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openvpn]

OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

18
votes
1answer
101k views

OpenVPN not default gateway for all traffic

I'm trying to make my client forward all traffic through a VPS running OpenVPN. As you can see, it will allow pings to both domains and raw IP addresses, but it will not allow traffic like that made ...
13
votes
6answers
26k views

Allowing SSH on a server with an active OpenVPN client

I have a VPS running CentOS 7 that I connect to with SSH. I would like to run an OpenVPN client on the VPS so that internet traffic is routed through the VPN, but still allow me to connect to the ...
6
votes
3answers
10k views

OpenVPN port-share with Apache/SSL

I'm trying to set up OpenVPN to listen on port 443, and then pass all HTTPS traffic to Apache, by using the port-share option. Relevant config snippets are: OpenVPN local ${PUBLIC_IP} port 443 port-...
40
votes
3answers
104k views

How to ensure OpenVPN connection uses specific DNS?

I'm using OpenVPN through Tunnelblick on MacOS X Lion. I need to set specific DNS (with local IP, which works only when VPN is up) for the duration of this VPN session only. I do not have access to ...
2
votes
1answer
8k views

How to do traffic shaping (rate limiting) with TC per OpenVPN client

This question is related to another question with a great answer and script from @Oliver. The goal: I want to modify/extend the script provided in this answer to suit my requirements, which are as ...
17
votes
3answers
40k views

OpenVPN and DNS. How to?

I'm using OpenVPN to set up a VPN to connect my laptop at home to my workplace LAN. I want to be able to refer my workplace computers by their name and not by their IP but I can't. This is my ...
32
votes
2answers
34k views

Can generated OpenVPN keys be used on multiple clients?

We are experimenting with running an OpenVPN server for our business. One question I can't seem to find the answer to is this: When we generate keys for one of our users for them to use at home, can ...
9
votes
1answer
7k views

Anonymizing OpenVPN Allow SSH Access to Internal Server

I'm using an anonymizing VPN, but want SSH access to internal computer. How do I access my internal computer through SSH? When I do ssh 98.123.45.6, the connection times out. IP address from cable ...
37
votes
6answers
52k views

How do you avoid network conflict with VPN internal networks?

While there's a wide variety of private non-routable networks across 192.168/16 or even 10/8, sometimes in being thoughtful of potential conflict, it still occurs. For example, I set up an ...
13
votes
7answers
26k views

VPN server on Google Compute Engine with OpenVPN

I'm trying to use Google Compute Engine server as VPN server for all my traffic (I'm living in Russia, we have some issues with censorship here). There is mini-tutorial about VPN on GCE, but it's ...
12
votes
4answers
10k views

Prevent SSH connection lost after logging into VPN on server machine

I encountered an issue that I can't deal with. When I'm logged onto an VPS over SSH and try to estabilish VPN connection on that VPS, the SSH connection between VPS and my machine get lost. I assume ...
32
votes
4answers
39k views

OpenVPN performance: how many concurrent clients are possible?

I am evaluating a system for a client where many OpenVPN clients connect to a OpenVPN server. "Many" means 50000 - 1000000. Why do I do that? The clients are distributed embedded systems, each ...
25
votes
5answers
37k views

Very low TCP OpenVPN throughput (100Mbit port, low CPU utilization)

I am experiencing extremely slow OpenVPN transfer rates between two servers. For this question, I'll call the servers Server A and Server B. Both Server A and Server B are running CentOS 6.6. Both ...
21
votes
2answers
15k views

SSH tunneling is faster than OpenVPN, could it be?

Logically, VPN should be faster than SSH for tunneling, because: It's running on UDP and not TCP (so no TCP over TCP) It has compression However, today I tested Redis replication over both methods. ...
6
votes
1answer
6k views

Limit/Throttle per user OpenVPN bandwidth using TC

I have a group of users connecting to my server via OpenVPN TCP and UDP (2 services). The two services are operating on tun0 and tun1 I'd like to be able to limit each user's bandwidth to say 5mb/s ...
14
votes
2answers
14k views

OpenVPN: How to mitigate path MTU issues on a per-client basis?

We have dozens of embedded devices installed at customers, all calling home to our OpenVPN service. That works fine in general, but a few of our customers have severe path MTU issues. Our influence on ...
8
votes
3answers
28k views

OpenVPN client-to-client

When usig a TUN (layer 3) OpenVPN server with client-to-client disabled, my clients can still talk to each other. The client-to-client config should prevent this according to the documentation: ...
17
votes
1answer
15k views

Why Openvpn use network 0.0.0.0 netmask 128.0.0.0 as default route?

If you use "redirect-gateway def1" option in openvpn config file,the server will add a default gateway on your route table, what i want to konw is Why openvpn did not use network 0.0.0.0 netmask 0.0....
8
votes
2answers
10k views

Bypass openvpn for particular ip

My desktop machine runs Trisquel GNU/Linux 6.0 (which is basically a libre version of Ubuntu 12.04), and I use OpenVPN to connect to a commercial VPN provider for internet access. It currently routes ...
5
votes
2answers
10k views

openvpn: connection established, can't ping server tun interface (debian server, windows & os x clients)

My goal: I want to set up openVPN on a vServer from the company netcup, running Debian squeeze. I only want a VPN connection from client to server; clients should not be able to see each other, also ...
16
votes
6answers
150k views

Fix 'TLS Error: TLS handshake failed' on OpenVPN client

I am configuring OpenVPN 2.3.6-1 on my Arch Linux server in order to encrypt SMB traffic over the public Internet. When I test the setup on one of my Linux virtual machine clients, I get the error: ...
10
votes
4answers
42k views

openVPN disconnect via command line in linux

Is there a way to disconnect an openvpn connection that was established by free-radius with a shell command line? I have all information about the openvpn connection: Username Client IP ...
2
votes
1answer
1k views

openvpn - only one client key/certificate pair working

Scenario: I have a Debian 6 openVPN virtual server and several clients (windows, os x). They all connect fine, however only one client with a certain key/certificate pair can ping the server, all the ...
5
votes
1answer
27k views

OpenVPN server cannot ping clients

I have OpenVPN set up on a Debian server. Clients can connect, and clients can ping and access resources (Samba shares and intranet) on the server. However, the server cannot ping the client - it ...
3
votes
1answer
1k views

Limiting OpenVPN bandwidth

I'd like to give users a certain amount of traffic. Let's say user A gets 1 GB and user B get 5 GB. I have a great script which does log all this info, however this script is called when the user ...
0
votes
1answer
780 views

Configure routes in OpenVPN

I am trying to figure out how to setup routing on OpenVPN. I have successful connection between client (OS X Snow Leopard) and server (OS X Leopard Server), and each can ping the other. However, I am ...
5
votes
1answer
15k views

How to set OpenVPN client bind address?

The OpenVPN client machine has two interfaces to Internet: a low-speed and high-speed one. Default route goes throught the low-speed one. I'd like OpenVPN to connect to server through the high-speed ...
3
votes
2answers
6k views

OpenVPN bad source address from client

I have one problem with OpenVPN. There are a lot drops records in the openvpn log file on the server: Mon Oct 22 10:14:41 2012 us=726541 laptop/ххх:1194 MULTI: bad source address from client [192.168....
1
vote
1answer
3k views

openvpn windows routes ip forwarding enabled but not working

I have setup an openvpn network, I have in my client windows two interfaces, one public with IP 1.2.3.4 and the openvpn interface, with ip 192.168.244.10 I am able to ping from windows to the server'...
0
votes
1answer
5k views

Openvpn - enabled redirect gateway but can't access any websites

First of all I'm a newbie to servers but not to stuff like programming so not totally alien to command lines etc. Second, I want to run openvpn on my remote server and connect from my ubuntu desktop ...
83
votes
10answers
162k views

Should I use tap or tun for openvpn?

What are the differences between using dev tap and dev tun for openvpn? I know the different modes cannot inter-operate. What is the technical differences, other then just layer 2 vs 3 operation. ...
21
votes
3answers
55k views

How to connect multiple VPNs using OpenVPN on Windows 7 on the same time?

I work most of the time remotly from home. To gain access to the different servers (via SSH) I have to use OpenVPN. I would like to connect to all of them (three, sometimes four) at once, so I dont ...
69
votes
2answers
82k views

Getting “Cannot ioctl TUNSETIFF tun: Operation not permitted” when trying to connect to OpenVPN

I'm trying to setup an OpenVPN Access Server in AWS using the market place AMI, but I;m struggling to connect to it. The access server is up and running. I've also added a user with Auto-Login and ...
12
votes
2answers
17k views

stunnel vpn traffic and ensure it looks like SSL traffic on port 443

I am trying to make my outgoing and incoming traffic look as legitimate as close to SSL traffic as possible. Is there a way to DPI my own traffic to ensure it looks like SSL traffic and not OpenVPN ...
54
votes
5answers
141k views

How to view connected users to open vpn server?

I'm developing a website for managing OpenVPN users with Django framework. But I need to know is there any way to extract active users from OpenVPN? My server is running Ubuntu 12.04.
20
votes
7answers
37k views

NetworkManager is not changing /etc/resolv.conf after openvpn dns push

I've got a problem which is "NetworkManager is not updating /etc/resolv.conf after openvpn connection with dns push configured". Here's my openvpn server config: (I've changed domain name to ABC.COM ...
23
votes
3answers
39k views

Why is `--duplicate-cn` not recommended in OpenVPN?

Is this for security reason, or performance reason?
18
votes
4answers
23k views

How do I prevent TCP connection freezes over an OpenVPN network?

New details added at the end of this question; it's possible that I'm zeroing in on the cause. I have a UDP OpenVPN-based VPN set up in tap mode (I need tap because I need the VPN to pass multicast ...
17
votes
3answers
19k views

No tun device in lxc guest for openvpn

I am trying to set up an openvpn server inside a lxc guest. However, it seams there is no tun device available in the container. Starting openvpn inside the container gives me this error: Tue Sep 18 ...
15
votes
5answers
22k views

OpenVPN make redirect-gateway optional

I'm currently running an OpenVPN server for multiple clients. All traffic is directed through the VPN (it's set up as gateway; push "redirect-gateway def1"). So far, all is working fine. However, I'...
10
votes
3answers
26k views

Multiple openvpn clients on one openvpn server

Can I have multiple openvpn clients connecting to a single openvpn server? The following setting works well for a single user This is the server configuration (openvpn.conf) port 1194 proto udp dev ...
7
votes
2answers
10k views

Connecting an EC2 VPC with OpenVPN all routed traffic being lost

I'm trying to use OpenVPN on Amazon Linux to connect the local LAN to a VPC on EC2. I have traffic flowing from the OpenVPN instance to any machine on the LAN, but other machines on the VPC are not ...
9
votes
1answer
42k views

How to route only specific openVPN traffic through a openVPN based on IP filtering of the destination? [closed]

I noticed a DNS proxy service I saw utilizes openvpn and tunnels supposedly only DNS traffic through the VPN which masks the users of the VPN's geolocation and allows the users system to use their ...
0
votes
1answer
9k views

Using DD-WRT to connect to VPN and Forward all traffic of certain devices through VPN

I have been able to setup my dd-wrt router to connect to an openvpn server and route all traffic through the vpn to the internet. This makes it so all traffic comming in from the LAN to the ...
8
votes
1answer
14k views

OpenVPN with mixed ipv4 and ipv6 clients

I have a VPN server handling various clients; some with ipv4 only, some with ipv4 and ipv6, and some that will be ipv6 only. Some of these clients are roaming, so ideally they should connect to ipv6 ...
7
votes
2answers
25k views

How can I setup OpenVPN with IPv4 and IPv6 using a tap device?

I've managed to setup OpenVPN for full IPv4 connectivity using tap0. Now I want to do the same for IPv6. Addresses and network setup (note that my real prefix is replaced by 2001:db8): 2001:db8::100:...
5
votes
0answers
1k views

Access website hosted on same server as VPN via the VPN

I have just finished setting up a OpenVPN server running on Ubuntu 12.04 and I have been able to connect to it from my own computer (the client). I am able to set up the VPN server to route ALL ...
12
votes
5answers
11k views

SSH traffic over openvpn connection freezes when I cat a file

I have an openvpn (version 2.1_rc15 at both ends) connection setup between two gentoo boxes using shared keys. it works fine for the most part. I use mysql, http, ftp, scp over the vpn with no ...
11
votes
4answers
38k views

How do I improve OpenVPN reliability over a high latency link?

We are running a OpenVPN VPN over a BGAN satellite link where ping times are about 3 seconds. We use it in a tun configuration, and we're running on Linux (CentOS). It is primarily email that will be ...
6
votes
5answers
10k views

OpenVPN with Active Directory integration

Is anyone successfully running OpenVPN with Active Directory integration? Are you using the openvpn.net or the openvpn.net/opensource version of OpenVPN? Any tips, tricks or gotchas or did it "just ...