VPN

[gabriel.rosseel]

I would like to install a VPN server on my Raspberry Pi (Raspbian Stretch).
Is OpenVPN a good VPN server or are there better alternatives?
What about a VPN client in Windows: are there VPN clients (build-in) that can connect to an OpenVPN server?
thanks for any answer in advance.

[neilgl]

Yes OpenVPN works on the pi. And you can get Windows (added not built in) and iOS and android clients (apps) to connect to the server.

[gabriel.rosseel]

thank you

[rpdom]

I use OpenVPN on a Pi B+, also Tinc, which is a "mesh" VPN rather than end to end.

[davidanderle]

I am curious whether I could connect to an OpenVPN server running on an RPi from Windows 10, using the built-in VPN handler (System settings-->Change Virtual Private Networks (VPN)).

The reason I'm asking is because what I gathered from some tutorials, I need an RSA key to access the OpenVPN server, which the Windows 10 VPN handler does not seem to support.

[Segaco]

Don't forget to read this comparison.

I also suggest you delve into this introduction to understand it better before you proceed with anything and hide your traffic correctly.

[Muntic0re]

What about a proxy? Good private proxy server will hide your true IP address and make the server controlling your target website unable to detect your real address.

[jamesh]

I've been meaning to write a documentation article on setting up a VPN, but don't really know a lot about it and don't really have time.

So if anyone wants to write something and submit it as a PR, that would be pretty cool.

https://www.raspberrypi.org/documentati ... -github.md

https://github.com/raspberrypi/documentation/issues/599

[DougieLawson]

So if anyone wants to write something and submit it as a PR, that would be pretty cool.

I wrote something in a previous life that could be hacked into submission for Raspberries, except it looks like IBM.com have removed it now. It still shows up in their search engine but the link has died.

https://www.ibm.com/developerworks/comm ... 6_and_ipv6

I'll see what I can do. Last time I tested my OpenVPN was in Australia. It routes both IPv4 & IPv6.

I've got a Portuguese colleague who's got a Raspberry Pi3 as he wants a OpenVPN from his house in Manchester, UK to his other house in Portugal. I've done the bare bones install for that, but we've not yet opened port 1194 on his router or tested it.

[epoch1970]

I've been meaning to write a documentation article on setting up a VPN, but don't really know a lot about it and don't really have time.

So if anyone wants to write something and submit it as a PR, that would be pretty cool.

There are so many use cases, it's hard to write one single how-to. Just in case:

- In the unusual setup dept. I wrote this post, it creates an L2 tunnel over L3 and was meant to show how to "bridge" ethernet with a wifi client interface on Pi 3.
(The server side could be converted to a Raspbian Stretch install.)

- My recipe for roadwarriors setups: passwordless certificate-based authentication, any login name, current TOTP code as password.
Client side, roadwarriors OpenVPN configs must include a line which reads "auth-user-pass".
Users are told to setup Authenticator or another TOTP mobile app, choose (and save) a login name in their software OpenVPN client on the PC, type (and not save) the current TOTP key displayed on their phone as password.
So access is password-protected, but users don't have to choose or remember a password, they only have to flash a QR code once. In case the tunnel breaks the current code has to be entered again, but in practice it's not too bad.

Server side setup:

Code: Select all

$ sudo apt-get install libpam-google-authenticator
$ /usr/bin/google-authenticator --time-based --disallow-reuse --label="OVPN Roadwarriors" --rate-limit=3 --rate-time=30 --window-size=15 --secret=/etc/openvpn/roadwarriors/rw.totp

$ grep -A5 plugin /etc/openvpn/roadwarriors.conf 
plugin /usr/lib/openvpn/openvpn-plugin-auth-pam.so openvpn-roadwarriors
       # TOTP challenge for roadwarriors. See /etc/pam.d/openvpn-roadwarriors
       # Login to enter from clients: any will do
       # Password: current TOTP code
       # TOTP secret shared by all roadwarriors users.
       # Certs are unique.

$ cat /etc/pam.d/openvpn-roadwarriors
# TOTP code auth to OpenVPN
# Username: any will do
account	required	pam_permit.so
# Password: TOTP code only
# The TOTP secret is the same for all users. Certs are unique.
auth	required	pam_google_authenticator.so user=root secret=/etc/openvpn/roadwarriors/rw.totp
# Log success/failure in /var/log/auth.log
auth	required	pam_warn.so

With pam_permit "verifying" the account name, OpenVPN roadwarriors do not need to exist as valid unix users on the OpenVPN server machine.

HTH

[jlonjin]

My use case is using my business wifi and connecting inside my network for an IoT project test. Our VPN here is L2TP/IPSec PSK, wondering what OS is best and what VPN client I can install, all tests to this point have crashed. Beginner on Pi, official tinkerer.

[nios2]

The choice of VPN will depend on your reason for using a VPN. Are you using it for IP protection or to overcome geoblocking?

[Alex White]

I find to you some alternative choice of vpn, as you asked at previous post. It is HotSpot Shield. You can read about it on wiki https://en.wikipedia.org/wiki/Hotspot_Shield.
I've been looking for a good VPN for a long time. Chose from review on this web https://topvpnchoice.com
If you want always be in unsecured networks, it is the best one. So another vpn service you also find there. I think, it is it is convenient vpn, cause it can be used on different OS.

[Muntic0re]

There are many good vpn services, here on Anta NET you can find many reviews. Currently I am using Nova vpn. It's not expensive and I often use it in my trips. In China for example with it help I successfully bypassed its firewall, and I can definitely tell you relying on my experience that it's the best vpn china iphone. So you just need to pick one that suits your needs.

[Rodney_Rhodes]

I am traveling to Australia and searching good VPN for my Raspberry Pi. Anyone suggest me about the best Raspberry Pi VPN that works well in Australia. Though I found the list of few good VPN services for Australia here: https://www.reviewsdir.com/best-australia-vpn/ But still, I want few suggestions.

[neilgl]

The OpenVPN I have on my pi3 has been tested from USA, Portugal, Spain, Canada, India, New Zealand, Singapore etc. All ok. I had to increase the timeout for NZ.

[vpnbest]

Does anyone here have used PureVPN? How will it work on raspberry pi ? I was reading PureVPN Review and asked their customer support too and they answered me yes you can but will it affect my speeds ?

[freddieodom]

I found an article on Good in this regard. Hope this might be helpful for you.

Here is the link:

https://medium.freecodecamp.org/running ... 496e46c960

[sandyroberts]

Those who have had the chance of using multiple VPNs and gone through their features and services; they must have seen OpenVPN on the list. It’s a VPN protocol that’s introduced 15 years back; it is currently the only protocol of its kind that is accessible via an open source application. Since it’s widely popular; it has been integrated to work on a few of the most famous user platforms like macOS, WindowsXP, iOS, Android, and Linux. For further details about OpenVPN kindly read OpenVPN Explained

[mahjongg]

Locking as this thread is turning into a VPN advertisement site for commercial VPN services.