OpenVZ Forum


Home » General » Support » OpenVPN inside VPS
Re: OpenVPN inside VPS [message #967 is a reply to message #965] Mon, 23 January 2006 14:01 Go to previous messageGo to previous message
dev is currently offline  dev
Messages: 1693
Registered: September 2005
Location: Moscow
Senior Member

Sorry for such delay... Embarassed I must say it's not a common request Shocked But I will try to help with it.

I'm still in doubt what you do, so as far as I understand from your messages you want something like this:
 ------------------------------
|   [vps1]      |  host system |
|               |              |
|   [vps2]      |              |
|               |     eth0     |  
| [vps-openvpn] |  192.168.1.4 | ----------------
|    venet0     |              | -- VPN channel over IP --
|  192.168.1.8  |              | ----------------
 ------------------------------

So, actually it looks for me like you are trying to setup VPS <-> world communication in the following way:

VPS - VPS venet0 - host - vps-openvpn venet0 - vps-openvpn/openvpn software - /dev/net/tun - tap0 - bridge - vps-openvpn venet0 - host - eth0 -

I'd like to draw arrows here, but it's text :0

more questions Smile
1. vps-openvpn - is VPS where you want to run OpenVPN software.
2. who are VPN clients? other VPSs? you want to assign 192.168.1.50-100 to them?

I would note that by default we have CONFIG_BRIDGE=n in our kernel. So you probably would need to rebuilt the kernel if want to organize network bridge. I can build a test kernel for you if required.

Another idea: you can run OpenVPN in host system (bridged with eth0), then you can assign your VPN IPs to VPSs.

Some other hints which you could (though unlikely for you to do so) have missed:
1. load kernel module 'tun' (modprobe tun)
2. VPSs be default have no access to tun/tap devices. To allow them to do so, exec:
[root@ts ~]# vzctl set VPSID --devices c:10:200:rw --save
[root@ts ~]# vzctl enter VPSID
entered into VPS VPSID
bash-3.00# mkdir /dev/net
bash-3.00# mknod /dev/net/tun c 10 200


http://static.openvz.org/userbars/openvz-developer.png

[Updated on: Mon, 23 January 2006 14:03]

Report message to a moderator

 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: nmap issue.
Next Topic: network not working
Goto Forum:
  


Current Time: Sun Sep 15 11:15:39 GMT 2024

Total time taken to generate the page: 0.03399 seconds