Assigning devices to dedicated Tunnels

Toe

Hi

I'm trying to configure my OpenVPN gateway in a way so that each client that connects to it, will get their own tunnel.
I successfully setup one Tun0 that all traffic/clients are using, but that is not enough, I need to dedicate one tunnel to each one client device.

In this image I try to illustrate what I'm trying to achieve: https://ibb.co/QrkcnFx

I have tried to search the forums for a similar setup, but fails, so if it's already present I'm very happy to get pointed there.
FYI, I'm not a networking guy at all .. but know my way around so to speak.

HW: Raspberry pi4, using Eth0, running Raspbian Buster 10.
The Pi4 is acting as a GW for my devices and is connected to Gbit internet.
I need the Pi4 to automatically create 3 OpenVPN tunnels at startup, apply the network & firewall config so that 3 Tuns are created and configured so that each device when they use the Pi4 as GW gets their own tunnel and are protected using the iptables firewall in the Pi4.
(In the future once this is stable, I would also like to add so that the Pi4 can act as VPN GW via it's build in wifi).

This is what I need help to setup.

I might be attacking this all wrong, if so please let me know.

//Hagge

TinCanTech

Toe wrote I need to dedicate one tunnel to each one client device

Why ? What specifically is the reason ?

Toe

1. performance is not enough with one tunnel, for some reason the OpenVPN process is only using one core at the time
2. connecting to different VPN providers/school etc

TinCanTech

Toe wrote 1. performance is not enough with one tunnel, for some reason the OpenVPN process is only using one core at the time

OpenVPN is single threaded, so using more than one instance can improve things.

Toe wrote 2. connecting to different VPN providers/school etc

This probably will not work the way you expect.

Otherwise, try it ..