search

kylemanna / docker-openvpn

🔒 OpenVPN server in a Docker container complete with an EasyRSA PKI CA
https://hub.docker.com/r/kylemanna/openvpn/
MIT License
8.77k stars 2.39k forks source link

Connecting to a client from the host machine #229

Open DimaK-tracxpoint opened 7 years ago

DimaK-tracxpoint commented 7 years ago

Hi all and thanks for the great product. I have to call a service listening on a TCP port - on the OVPN client machine. There is no issue to do so from OVPN server container - but I want to be able to connect from hosting it machine. Is it possible and how the routing has to be set up? I got the following configuration:

Thanks!

1070148808 commented 7 years ago

sorry,i want to use server ping client,but not success,why????

jcberthon commented 7 years ago

I'm also trying to solve that issue. I will answer this issue when I've found a solution.

I'm currently trying to configure the host routes to redirect packets to the OVPN container which should do the routing. No success yet, but trying...

The other alternative would be that the tun0 device is not created with the network namespace of the container but in the one of the host (e.g. --net=host) . But I don't like the idea of running the OpenVPN container within the same namespace as the host.

lukecyca commented 5 years ago
  1. Ensure that you have ip forwarding enabled in the docker-openvpn container:
root@vps9:~/server-ops/docker# docker-compose exec openvpn /bin/bash
bash-4.4# sysctl net.ipv4.ip_forward
net.ipv4.ip_forward = 1
  1. Configure a new static route in your docker host so that traffic for the vpn network is sent via the docker-openvpn container:
ip route add 192.168.255.0/24 via 172.18.0.11
  1. Ensure your clients get a static route for the docker network so they know to reach it via the VPN server. There are a few ways to do this, but I did it with:
push "route 172.18.0.0 255.255.0.0 192.168.255.1"