netns

netns.sh

#!/bin/bash
case $script_type in
        up)
        ip netns add vpn
        ip link set dev "$1" up netns vpn mtu "$2"
        ip netns exec vpn ip link set dev lo up
        ip netns exec vpn ip addr add dev "$1" local "$4" peer "$5"
        ;;
        route-up)
        ip netns exec vpn ip route add default via "$route_vpn_gateway"
        ;;
        down)
        ip netns delete vpn
        ;;
esac

pia.ovpn

client
dev tun
proto udp
remote us-east.privateinternetaccess.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/ca.crt
tls-client
remote-cert-tls server
auth-user-pass /etc/openvpn/pass.key
comp-lzo
verb 4
mute 5
reneg-sec 0
crl-verify /etc/openvpn/crl.pem

syslog
route-noexec
ifconfig-noexec
up /etc/openvpn/pia.sh
down /etc/openvpn/pia.sh
route-up /etc/openvpn/pia.sh
script-security 2