OpenVPN install on Proxmox LXC - VPN tutorial

Поділитися
Вставка
  • Опубліковано 17 вер 2024

КОМЕНТАРІ • 51

  • @BrentHaub
    @BrentHaub 4 місяці тому +2

    Great stuff! Got it working like a charm. Came here after failing to get the native VPN connection working on my Netgear Nighthawk. Using proxmox + openVPN on an Ubuntu CT just works with your method.

  • @huntermcclovio4517
    @huntermcclovio4517 3 місяці тому +3

    Thank you for taking the time and explain this tutorial in great detail. I am new to proxmox and vpn. I learned something new today and I now have a VPN!! 😀🥰

  • @kbbenton7792
    @kbbenton7792 2 місяці тому +1

    I like this better than the previous video I watched because it uses Ubuntu 22.04 instead of Ubuntu 18.04. Works great and is on a still-supported OS! 🙂

    • @BlueMonkey4n6
      @BlueMonkey4n6  2 місяці тому

      Thanks for watching and for the positive comment!

  • @Oliviero-sb9ko
    @Oliviero-sb9ko 22 дні тому +1

    Thx mate you pointed me to well working solution, i am using proxmox, but created light ubuntu server as VM just for this, installed openvpn, trasnfer file and its perfectly working in my mac. From there i can go with RDP etc. go to my private machine when i am at work or anywhere or to my homelab.
    IT works its fast as my Download upload is 1/1G with static ip. Also i have added a bit of securuty layer about downloading stuff so it drops when its sus.
    I am running multiple servers at my home lab for fun and for education - also to improve myself as IT admin in work.
    Thank you for pointing me good direction :)
    Enjoy your day and keep those tech vids, i love em :)
    🖥🖥🖥🖥🖥🖥🖥🖥🖥🖥🖥🖥🖥

    • @BlueMonkey4n6
      @BlueMonkey4n6  21 день тому

      Awesome, keep doing what you are doing. There is so many things one can do with a home lab. And it so much fun!

  • @zach7269
    @zach7269 3 місяці тому +2

    Thanks for taking the time to make this. Explaining each linux command would be helpful. Maybe that would be too long of a video for most audience.

    • @BlueMonkey4n6
      @BlueMonkey4n6  3 місяці тому +1

      Good suggestion, I will see about explaining each command in the future and balance it with video length

  • @NguyenCungHoaHien
    @NguyenCungHoaHien Місяць тому +1

    Thanks for the video! I think this way of installation doesn't come with a WebUI for OpenVPN, yeah?

    • @BlueMonkey4n6
      @BlueMonkey4n6  Місяць тому

      Thats a good question, i am sure there is a WebUI to do this but I am a command line guy who likes to type and understand whats going on under the hood.

  • @KrisHoobergs
    @KrisHoobergs 8 місяців тому +1

    Great finally a video where my OpenVpn is working... except for some reason the performance is very bad and so not useful (talking B/S and KB/S). Do you have any idea what the reason could be?

    • @BlueMonkey4n6
      @BlueMonkey4n6  8 місяців тому +1

      Great question. I believe there are many factors as to why performance is not so good. Two top reasons is encryption algorithm and CPU power. You could monitor the CPU usage to see how much of it is taken up when OpenVPN is doing its thing. And trying out a less taxing encryption algorithm may help in speed but you sacrifice security. You may also want to check on whether you have compression turned on, that would for sure slow things down on older processors

  • @moonfall84
    @moonfall84 4 дні тому +1

    I'm not that expert as you - how did you save the .ovpn file to be able to transfer it later on via Snapdrop? This part is not showed :( I'm using Windows based PC not Mac)

    • @moonfall84
      @moonfall84 4 дні тому +1

      OK I just copied the data to new notepad file

    • @BlueMonkey4n6
      @BlueMonkey4n6  3 дні тому

      Yeah that was pretty much what i did

  • @gambeta1337
    @gambeta1337 4 місяці тому +2

    11:30 you should've shown how to actually download that file to a computer so that you can send it to your iPhone.

    • @BlueMonkey4n6
      @BlueMonkey4n6  4 місяці тому

      Ah, good point. I was so excited to get that file to my iPhone, I didnt explain clearly. I basically just copied that text from the terminal window from Proxmox and then pasted it to a TextEdit document on my Mac. Alternatively I could have transferred it using a NAS on my network.

    • @gambeta1337
      @gambeta1337 4 місяці тому +1

      @@BlueMonkey4n6 Yup, that works as well. Was jsut something I noticed you didn't explain so that you can improve in further videos. I was able to do this by setting up a SCP connection

    • @BlueMonkey4n6
      @BlueMonkey4n6  4 місяці тому

      @@gambeta1337 appreciate the useful feedback! scp is definitely another good way of doing it.

  • @maomao6679
    @maomao6679 2 місяці тому

    I've did pretty everything identically except the I used debian instead of ubuntu i don’t know if that's a big deal. But when I try, my vpn can connect, but cannot get the proper dns server when connected to the vpn, it gets 10.0.0.10 instead of the ip of my router... Help pls TwT.
    Ps: I use tunnelblick to connect to my vpn on a macbook

  • @repairstudio4940
    @repairstudio4940 4 місяці тому +1

    Liked and Subbed, is this as secure as CloudFlare and do I need a domain and all the jazz like Cloudflare?

    • @BlueMonkey4n6
      @BlueMonkey4n6  4 місяці тому

      Thats a good question. Stay tuned to this channel as I am planning to do an episode about services that provide Dynamic DNS such as Cloudflare.

  • @Whatisthatcrypto
    @Whatisthatcrypto 28 днів тому +1

    Help please. I got up to 07:20 no problems but try to boot up the container and it fails. I have this on an R710 server with CT setup of 2 cores + 2048 RAM + 8 GB SSD. Error log says
    mount_entry: 2213 No such file or directory - Failed to mount "/dev/net" on "/usr/lib/x86_64-linux-gnu/lxc/rootfs/dev/net"
    lxc_setup: 3915 Failed to setup mount entries
    do_start: 1273 Failed to setup container "201"
    sync_wait: 34 An error occurred in another process (expected sequence number 3)
    __lxc_start: 2114 Failed to spawn container "201"
    TASK ERROR: startup for container '201' failed
    I have 6 CTs and 8 VMs runnable without issue so I closed them all down and the VPM CT still wont fire up.
    Any help appreciated.

    • @BlueMonkey4n6
      @BlueMonkey4n6  26 днів тому

      Did you enable the VPN inside the unprivileged container? On your host machine, you can do:
      # chown 100000:100000 /dev/net/tun

  • @vijaydembla2447
    @vijaydembla2447 6 місяців тому

    Thanks for putting this together, and explaining it step by step. Unfortunately, since i have moved to pfsense, my vpn files are taking the local address, and not the wan ip address. And therefore, it doesn't work for me. To add more detail. The step right after when you execute the bash script, it doesn't prompt me for the option "This servere is behind NAT...". and When i create an opvn file, it has the containers local ip address listed on the top. Would you please be able to help? Thanks in advance

  • @ErezMaruani
    @ErezMaruani 3 місяці тому +1

    the system does not have the tun device available. tun needs to be enabled before running this installer.
    can help please

    • @BlueMonkey4n6
      @BlueMonkey4n6  3 місяці тому

      did you edit the .conf file for that LXC to add the /dev/net/tun device?

    • @skylerhilborn6892
      @skylerhilborn6892 2 місяці тому

      ​​@@BlueMonkey4n6 I am having the same issue, followed all steps up to this point and getting the same message after running bash ./openvpn-install.sh command
      Edit: couple typos when I updated the conf file.

  • @DonJackson-y7g
    @DonJackson-y7g 2 місяці тому +2

    where are *.ovpn files located on proxmox lxc and how do i copy file to use on windows10 client?

    • @BlueMonkey4n6
      @BlueMonkey4n6  Місяць тому

      The .ovpn files are located in "/root/" of the OpenVPN where you should run the script openvpn-install.sh. To copy the file to your windows client, you can transfer the file via scp or sneaker net if by copying the file to a USB drive.

    • @DonJackson-y7g
      @DonJackson-y7g 29 днів тому +1

      @@BlueMonkey4n6 thanks for all of your help I appreciate your response very much

  • @FRVN3K
    @FRVN3K Місяць тому +1

    How can i create a more config files for more devices?

    • @BlueMonkey4n6
      @BlueMonkey4n6  Місяць тому

      you just run the script "openvpn-install.sh" again for other client machines. It will create more private-key and public-cert-request files.

  • @jlgiorio
    @jlgiorio 8 місяців тому +1

    Great tut!! I wondering, can we setup a password for the user?

    • @BlueMonkey4n6
      @BlueMonkey4n6  7 місяців тому +1

      Apparently you can although not recommended due to security. I have not tried it out myself but I'm going to look into it and maybe create video tutorial for the steps.

    • @jlgiorio
      @jlgiorio 7 місяців тому +2

      @@BlueMonkey4n6 I thought having a password would be safer. We have the certificates and you would still have to enter a password to connect. I'm going to do some tests here too. Post results here. Thank you and congratulations again for the videos!

  • @Hckr-ei2xj
    @Hckr-ei2xj 9 місяців тому +2

    thanks for this

    • @BlueMonkey4n6
      @BlueMonkey4n6  9 місяців тому +1

      you are welcome. Thanks for watching and thanks for leaving a comment

  • @Warroy_
    @Warroy_ 6 місяців тому +1

    Thanks, works perfectly fine and learned more on proxmox

  • @IGrowUP2023
    @IGrowUP2023 Місяць тому

    its give me error when i boot the container "bpf_device_cgroup_prepare: 3469 Invalid argument - Failed to parse device rule devices.allow==c 10:200 rwm
    mount_entry: 2262 Operation not permitted - Failed to mount "=/dev/net" on "/usr/lib/x86_64-linux-gnu/lxc/rootfs/dev/net"
    lxc_setup: 3915 Failed to setup mount entries
    do_start: 1273 Failed to setup container "101"
    sync_wait: 34 An error occurred in another process (expected sequence number 3)
    __lxc_start: 2114 Failed to spawn container "101"
    TASK ERROR: startup for container '101' failed"

    • @IGrowUP2023
      @IGrowUP2023 Місяць тому +1

      i have fixed it

    • @BlueMonkey4n6
      @BlueMonkey4n6  Місяць тому

      oh glad you fixed the problem. care to share how you fixed it?