Hi guys,
we are a group of student that are trying to develop a VPN for an academic project. Our final target is to be able to stream video (for example from a webcam) from a client to another client.
How should we configure our VPN in order to achieve this goal?
I'll try to explain the problem with more details:
- Server: we have built our own server (address 192.168.1.100 in my local network). The VPN net has the address 10.8.0.0/24. It uses UDP.
- Port 1194 UDP is open on both clients and server
- Clients: we have two clients running on two different networks connected to the internet (both network use NAT, meaning that both client has an address like 192.168.something in their own local network). Let's say that the two clients has address of 10.8.0.6 (client1) and 10.8.0.10 (client2) in the VPN network.
-OS: Ubuntu (16.04 LTS or higher) everywhere
It seems the clients are able to ping each other, but when we try with the "traceroute" command it works from client1 to client 2 but not in the opposite direction. If we try with "traceroute -I" it works in both directions....I read that by default traceroute uses UDP so why the hell it doesn't work since the VPN uses UDP too and it works?
Since our goal is to stream video, yesterday we tried to send webcam video from one client to the other (through GStreamer using UDP) and it worked. We stopped the stream and tried like 5 minutes later and it didn't work anymore! Today we retried but still fail.
Have you any idea on why it stopped working?
Another question: since che server (and the clients) are not DIRECTLY the gateways but are behind NAT in the local network, should we change some entries in our routers routing tables? (my point is that if the ping works, than the routing tables are fine...but I am not sure of this, can you confirm?)
Thank you for your help, please ask if some info is missing
SERVER.CONF
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
CLIENT.CONF
client
dev tun
proto udp
remote MY SERVER PUBLIC IP 1194
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
remote-cert-tls server
comp-lzo
verb 3
P.S. it if can be of any help, we used this tutorial to build our server/clients:
https://www.youtube.com/watch?v=XcsQdtsCS1U
