[5 Mins Docker] Bring OpenVPN Server Up and Running in One Docker Command

lichengxin • 2023-07-09 21:53 • 好物分享

The OpenVPN Community Edition (CE) is an open source Virtual Private Network (VPN) project. It creates secure connections over the Internet using a custom security protocol that utilizes SSL/TLS. This community-supported OSS (Open Source Software) project, using a GPL license, is supported by many OpenVPN Inc. developers and contributors as well as the extended OpenVPN community. CE is free to deploy, but it does require a strong understanding of Linux and using the command line interface.

OpenVPN Tunneling Protocol

The OpenVPN tunneling protocol uses the Secure Socket Layer (SSL) encryption protocol to ensure data shared via the Internet remains private using AES-256 encryption. Because the code is available for audits, anyone can find — and fix — vulnerabilities. It’s not only considered the most secure VPN tunneling protocol, it also delivers faster connections and can bypass most firewalls.

Diagram

Docker Run or Docker-Compose

Github Project: https://github.com/dockovpn/dockovpn

1 Install docker and docker-compose

apt update

apt install docker.io

apt install docker-compose

2 run one line command

original command from Github

docker run -it --rm --cap-add=NET_ADMIN / -p 1194:1194/udp -p 80:8080/tcp / -e HOST_ADDR=$(curl -s https://api.ipify.org) / --name dockovpn alekslitvinenk/openvpn

A little bit modification with -d option:

docker run -itd --rm --cap-add=NET_ADMIN / -p 1194:1194/udp -p 80:8080/tcp / -e HOST_ADDR=$(curl -s https://api.ipify.org) / --name dockovpn alekslitvinenk/openvpn

More with persisting configuraiton:

You will need to create a local folder at /opt/Dockovpn_data folder first.

docker run -itd --rm --cap-add=NET_ADMIN / -p 1194:1194/udp -p 80:8080/tcp / -e HOST_ADDR=$(curl -s https://api.ipify.org) / --name dockovpn alekslitvinenk/openvpn / -v openvpn_conf:/opt/Dockovpn_data

3 Outputs

root@ub20-1-test:~# docker run -itd --rm --cap-add=NET_ADMIN / > -p 1194:1194/udp -p 80:8080/tcp / > -e HOST_ADDR=$(curl -s https://api.ipify.org) / > --name dockovpn alekslitvinenk/openvpn Unable to find image 'alekslitvinenk/openvpn:latest' locally latest: Pulling from alekslitvinenk/openvpn 29291e31a76a: Pull complete ee9d0fc0608b: Pull complete 050f6b5684f5: Pull complete 3df1fe3bf9f7: Pull complete 7663deeb3206: Pull complete ee20c2e12945: Pull complete Digest: sha256:86480f318120c9db963cd431ed08cd240c5eac1c3f74de689476ab68a4666765 Status: Downloaded newer image for alekslitvinenk/openvpn:latest 45f835677b614b285826a6bdfdd735ae9b24307b3605b58d27cd9a858837a4b7 root@ub20-1-test:~#

Make sure your VPS opened two ports: tcp 80, and udp 1194.

4 open http://<Public IP> to get your client profile which will be imported to your OpenVPN Client.

Once this http port accessed, it will be automatically shutted down. No more http opened to the world.

5 Download OpenVPN Client for Windows

OpenVPN Connect - Client Software For Windows | OpenVPN

Double click to install it.

6 Run OpenVPN client and import step 4's downloaded file