OpenVPN server and client on the same machine

kanka

Hello,

I rent a dedicated server, and I am thinking about setting up an OpenVPN server on this machine; for the sake of clarity, let's call it Bob. The idea behind this is to set a VPN tunnel between my laptop and Bob when I connect to doubful/public WiFi networks.

Problem: Bob is already acting as a client to another distinct OpenVPN server, and I don't want these 2 VPN networks to communicate with each other. Note that only a very specific type of traffic goes through the existing VPN, most of the traffic goes in and out directly.

Is it possible to do this in a relatively easy fashion?

Thanks in advance

maikcat

you can always use firewall rules to filter out traffic....

Michael.

kanka

maikcat wroteyou can always use firewall rules to filter out traffic....

Michael.

Yes, of course. Maybe my question was not specific enough: I'm comfortable setting up OpenVPN as a client, but never did it as a server. So before digging into it I wanted to make sure that a same instance of OpenVPN can act as client for one VPN network, and at the same time as a server for a different VPN network.

I'm guessing that by using separate interfaces (tun0/tun1) and adequate iptables rules things shouldn't mess up, but I'd like a confirmation that openvpn can act as a client and a server at the same time.

maikcat

I'm guessing that by using separate interfaces (tun0/tun1) and adequate iptables rules things shouldn't mess up, but I'd like a confirmation that openvpn can act as a client and a server at the same time.

the answer is yes,

i personally use a linux with 30 instances of openvpn run on it (3 server the rest as client) and it works flawlessly...

Michael.

kanka

Perfect, thank you very much!

While I'm at it, 2 more questions (at the noob level I'm afraid):

* I'm thinking about setting up a routed VPN, with masquerade on the server, such that all the internet traffic of the client goes through the VPN tunnel and comes out at the server. I'd think it is something pretty standard, but after a brief search for a tutorial/instructions I couldn't find much. Does anybody know of such a tutorial?

* Thinking about certificates. I have a class 2 wildcard certificate for my domain. Is it possible/advisable to use it for my openvpn server as well? Note that I most probably will be the sole user to connect to that VPN

maikcat

hello there...

I'd think it is something pretty standard, but after a brief search for a tutorial/instructions I couldn't find much. Does anybody know of such a tutorial?

here it is...

http://openvpn.net/index.php/open-source/documentation/howto.html#redirect

also you can always build a CA/keys for your openvpn server...

Michael.

kanka

I had seen this tutorial, but it's more a proof of concept than something really usable - notably regarding dhcp. Thanks anyway

janosek

Hello,

I would like to accomplish this same setup. Is there anyone out there who has set this up that can provide me with their configuration script?

mwandelaar

kanka wroteI had seen this tutorial, but it's more a proof of concept than something really usable - notably regarding dhcp. Thanks anyway

It's not a proof of concept, these rules are all it takes to make it work. Most of the commercial (Open)VPN-providers use this to provide internet-access via the vpn-servers.

So if you have your server running, add this line to the server-config and apply the iptables rule, enable packet forwarding (sysctl net.ipv4.ip_forward = 1 ) and you're done.