A plug-and-play OpenVPN server that "Just Works" and has secure defaults.
Install the snap, download the client config and connect!
- Supports both IPv4 and IPv6 with secure encryption and DDoS protection.
- Defaults to a fast udp connection. If that is blocked, clients will fall back to a more covert tcp connection that mimicks HTTPS.
- Generates
.ovpn
client config files that work on Linux, Windows, Mac, Android and iOS.
Getting Started
- Install the snap on the server.
sudo snap install easy-openvpn-server
- Export the client config.
sudo easy-openvpn-server show-client default > default.ovpn
- Import the
.ovpn
config file into the VPN application of your device and connect!
By default, all the traffic of your device will go over the VPN.
If you don't want this, run
sudo snap set easy-openvpn-server push-default-gateway=False
.
Changing the public address
The snap will do its best to figure out what the public address of the server is. However, when that fails, you can manually set the public address.
sudo snap set easy-openvpn-server public-address=example.com
Managing clients
The snap automatically creates a client profile and config with the name default
. However, it's recommended to create a separate client profile for each user. This way, you can revoke the client profile when that user does not need access to the VPN anymore.
sudo easy-openvpn-server add-client alice
sudo easy-openvpn-server show-client alice > alice.ovpn
sudo easy-openvpn-server remove-client alice
Changing ports
By default the server runs on port 443/tcp (https) and 1194/udp (OpenVPN). If those ports are already used, you can change which ports the server runs on.
sudo snap set easy-openvpn-server udp-server.port=1234
sudo snap set easy-openvpn-server tcp-server.port=80
More options
You can specify additional search domains.
sudo snap set easy-openvpn-server additional-search-domains="test"