Skip to content
webpack
Sign in
All apps
Private Networks and Tunnels

OpenVPN

High risk: it enables IPv4 forwarding (a sysctl.d file) and adds firewall NAT rules for the VPN subnet 10.9.0.0/24 through a small systemd unit. Installs openvpn and easy-rsa, creates the CA, server and client certificates (elliptic curve, no Diffie-Hellman wait), starts openvpn-server@server and writes client files to /root/openvpn-clients. Safe to run again: existing keys and clients are kept.

What it does

Private Network and Tunnel Installers

What you will be asked

You fill these in during setup.

  • Number of clients Required
    How many client files to create (1 to 10). Each device needs its own file. Running the script again with a higher number only adds the missing ones.
  • VPN port RequiredAdvanced settings
    The port OpenVPN listens on. 1194 is the standard; 443 with TCP passes more firewalls but is slower.
  • Protocol RequiredAdvanced settings
    udp is faster. tcp works where UDP is blocked.
  • Public endpoint OptionalAdvanced settings
    Optional. The public IP address or domain clients connect to. Leave empty to use this server's public address.

Reconnecting Could not reconnect The page is paused

The connection to the site dropped. We are bringing it back; your page stays as it is. Check your internet connection. We keep trying by ourselves, and the page reloads once the site answers. This page was paused to save resources. Resume it to continue.