Troyhy
Posts: 3
Joined: Tue Jan 24, 2012 8:32 pm
Contact: Website

Re: Making VPN router

Tue Jan 24, 2012 8:45 pm

Hi all!

I thought while waiting info how to actually get my own PI board, I could  debug my PI project idea here.

I'm planning to make easy as possible to configure VPN router.


Django on top of lighthttpd
2nd NIC for isolating and for ease of configuration (option)
PPTPD
OpenVPND
Debian

Something like this. Intention is to be able to use this to serve couple Users using remote desktop, ocationally stream video and handle all email connections securelly when out of office.
please comment!
-t
edit:
ok.. cannot fix the topic anymore.. sorry

hvc123
Posts: 81
Joined: Fri Nov 25, 2011 11:54 am

Re: Making VPN reouter

Tue Jan 24, 2012 9:52 pm

sound like a good idea making a vpn gateway. only problem is having to use a usb ethernet card make me shudder bbbrrrrrrrrr....... (usb networking sux)

User avatar
alexandru.cucu
Posts: 75
Joined: Mon Sep 05, 2011 6:07 pm
Contact: Website

Re: Making VPN reouter

Tue Jan 24, 2012 10:27 pm

Even the integrated Ethernet chip from the model B uses USB so you can't do anything about that

Only tests on the real thing will show how well this works.
https://launchpad.net/~alexandru.cucu

marksinc
Posts: 1
Joined: Tue Jan 24, 2012 10:41 pm

Re: Making VPN reouter

Tue Jan 24, 2012 10:54 pm

One word: Sub-Interfaces.

It's probably going to plug into an ADSL router isn't it? In that case, you just need to do some slightly fancy networking (but if you're doing VPNs you probably know your stuff anyway).

error404
Posts: 351
Joined: Wed Dec 21, 2011 11:49 pm

Re: Making VPN reouter

Wed Jan 25, 2012 2:15 am

Raspberry Pi is about as far from ideal as it gets for this kind of application. You'd be better off with a RouterBoard or even a consumer router with new firmware IMO. Much cleaner, should be more stable, and will probably perform better.

User avatar
alexandru.cucu
Posts: 75
Joined: Mon Sep 05, 2011 6:07 pm
Contact: Website

Re: Making VPN reouter

Wed Jan 25, 2012 11:26 am

error404 said:


You'd be better off with a RouterBoard or even a consumer router with new firmware.


But where's the fun in that?
https://launchpad.net/~alexandru.cucu

Troyhy
Posts: 3
Joined: Tue Jan 24, 2012 8:32 pm
Contact: Website

Re: Making VPN reouter

Wed Jan 25, 2012 1:59 pm

This is just one aplication that needs embedded linux board. I know this is not the most optimal HW for this application, but it would be nice starter project to learn new platform

Learning platform that can do just one thing extremely good is not my focus here.

But what is most interesting in this board is ability to run latest kernel and to do different embedded projects.

What I need is swiss army knive for embedded linux projects and PI is looking good in that field.

currently my solution costs > 300€

error404
Posts: 351
Joined: Wed Dec 21, 2011 11:49 pm

Re: Making VPN reouter

Wed Jan 25, 2012 6:25 pm

Cracknel said:


But where's the fun in that?



Ending up with a solution that is reliable and works well? OP's query seemed somewhat business oriented, where I really wouldn't want to hack something together with USB NICs. If you're just doing it for fun though, why not, of course it's possible, just don't be surprised when you have to reboot it once a week

Troyhy said:


currently my solution costs > 300€



If Pi has a hope in hell of competing with your 300€ solution, you should be at least able to get the price down with ALIX. A complete setup including CF, power supply and a nice aluminum case is under 150€. I have a lot of these in the field running pfSense. They're great as a fairly powerful x86 embedded box for this kind of thing, you just don't get GPIO or other I/O interfaces.

wallabybob
Posts: 17
Joined: Thu Aug 18, 2011 2:08 am

Re: Making VPN reouter

Thu Jan 26, 2012 1:32 am

The Alix 2D13 has pins for GPIO and I2C - see http://pcengines.ch/alix2d13.htm

Troyhy
Posts: 3
Joined: Tue Jan 24, 2012 8:32 pm
Contact: Website

Re: Making VPN reouter

Fri Jan 27, 2012 5:47 am

I looked at Alix 2D13.

It's actually better board for this VPN project, but the sad part of i386 based boards is usually lack of GPIO.

There is generously 1 GPIO pin in 2D13, but I2C changes things. That I did not notice at all..

I have to inspect further..

-t

grunge
Posts: 1
Joined: Mon Jan 30, 2012 1:28 pm

Re: Making VPN reouter

Mon Jan 30, 2012 2:57 pm

wallabybob said:


The Alix 2D13 has pins for GPIO and I2C – see http://pcengines.ch/alix2d13.htm


Troyhy said:


There is generously 1 GPIO pin in 2D13, but I2C changes things. That I did not notice at all..


Hello,

I actually use Alix 2D13 as a Debian-based home (openvpn)router with some other functions like web server (lighttpd) and webcam with motion-triggered recording (motion, behind lighttpd). I also wanted to connect door sensor and fire detector to it using GPIO but I eventually found out that there are no GPIO pins on the board. Although the product description (http://pcengines.ch/alix2d13.htm) says that one of the changes from ALIX.2C is "add pins for use as GPIO", the product manual (e.g.  http://www.corpshadow.biz/bizs.....manual.pdf) says "The LCP port can also be used to connect a super I/O device. Unlike SC1100 based WRAP boards, this port cannot be reprogrammed as GPIO pins."

So my question is, why do you guys think that ALIX 2D13 has pins for GPIO (wallabybob), or at least a single one (Troyhy)?

However, except for GPIO, I can confirm that ALIX2D13 is a perfect hardware for a VPN router, especially a Linux-based one. It even comes with a crypto acceletor for AES128 (unfortunately not AES256).

Siamak
Posts: 70
Joined: Sat May 31, 2014 1:48 pm

Re: Making VPN reouter

Tue Feb 21, 2017 3:48 pm

Hi Guys,

I was looking at this site :
http://blogs.arcsoftwareconsultancy.com ... trictions/
and has a lot of information in it and can be useful.

Nevertheless it uses an external VPN provider to make the router/tunneling work, I have created my own Raspberry Pi Open VPN server and have my own .OVPN file, I did put the question to the creator of the site, had no answer yet, if some one could enlighten me on that I really appreciate, my question is therefore is: where do I need to place the .OVPN file that contains my keys and the rest. I know where it goes in my Windows machine and it is working absolutely like a charm, my Open VPN server that is.

The article in this site is very comprehensive, may be I am a novice on all this, that I don't get the gist of it yet.

Cheers

Siamak

Return to “Other projects”