OpenVPN

OpenVPN is an open-source VPN application that lets you create and join a private network securely over the public Internet.

This Package provides OpenVPN integration for BlueOnyx 5210R, 5211R and 5212R.

It allows your users to safely connect to your server, but also to use your server as VPN endpoint for their internet connection. This can server multiple purposes such as encasing all connections to your server (Email, FTP, Web - even SSH) with an additional layer of security and encryption.So even unsecure protocols such as regular POP3 or IMAP or Web accesses will be encrypted between the users PC and your server. Which makes OpenVPN ideal if the server is accessed via untrusted internet access such as public Wifi-hotspots.

Additionally (if you enable this feature) your users can use OpenVPN to access other destinations in tne internet, in which case your VPN server will appear to be the origin of the connection, which masks the real users IP address and his geographical origin. For this to work you have to have either our APF or Firewalld PKG installed and active.

This PKG integrates nicely into the BlueOnyx GUI and gives you, your administrators and end users an easy to understand interface to manage OpenVPN and/or to download their OpenVPN connection details.

The OpenVPN connection details (a standard OVPN file - and a separate Zip with the OVPM file, the public OpenVPN server certificate and the client certificates) can be downloaded by each user with activated OpenVPN access via their Personal Profile GUI page. These details can then be used with OpenVPN client applications such as "OpenVPN Connect" (available for Windows, Mac, Apple and Android mobile devices or Linux).

You as server administrator can also create and revoke OpenVPN access certificates via the GUI at any time. You can configure in the OpenVPN server settings if you want to allow siteAdmins to be able to manage OpenVPN access for Vsite users under the siteAdmin's control, or if you reserve the right to grant OpenVPN access only selectively to yourself. In that case systemAdmin access is required to enable/disable OpenVPN access of selected users.

This package also has provisions to open the required UDP port automatically in the APF firewall (if installed) or Firewalld (if enabled). The required IPtables postrouting rule will also be added automatically either to APF (if installed), the regular IPTables configuration or in Firewalld (if enabled).

Please note: Under Aventurin{e} or OpenVZ the VPS in question with the OpenVPN package installed must have the capability Net/TUN enabled. In Aventurin{e} this can be done via the GUI interface under VPS / Basic Settings by ticking the respective checkbox and saving. Also make sure your Aventurin{e} node has the kernel module "tun" loaded ("modprobe tun").