Skip to content

Instantly share code, notes, and snippets.

@xuru
Last active December 11, 2015 06:28
Show Gist options
  • Save xuru/4558909 to your computer and use it in GitHub Desktop.
Save xuru/4558909 to your computer and use it in GitHub Desktop.
openvpn madness
client
dev tap
proto tcp
remote 50.112.165.49 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert vagrant-eric_plaster.crt
key vagrant-eric_plaster.key
keepalive 10 60
ping-timer-rem
comp-lzo
verb 3
root@localhost:~# ifconfig
eth0 Link encap:Ethernet HWaddr 08:00:27:5f:68:96
inet addr:10.0.2.15 Bcast:10.0.2.255 Mask:255.255.255.0
inet6 addr: fe80::a00:27ff:fe5f:6896/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:13192 errors:0 dropped:0 overruns:0 frame:0
TX packets:11603 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1854202 (1.8 MB) TX bytes:3114497 (3.1 MB)
Interrupt:10 Base address:0xd020
eth1 Link encap:Ethernet HWaddr 08:00:27:66:b1:f7
inet addr:33.33.33.11 Bcast:33.33.33.255 Mask:255.255.255.0
inet6 addr: fe80::a00:27ff:fe66:b1f7/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:45 errors:0 dropped:0 overruns:0 frame:0
TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:7335 (7.3 KB) TX bytes:468 (468.0 B)
Interrupt:9 Base address:0xd060
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:507 errors:0 dropped:0 overruns:0 frame:0
TX packets:507 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:57432 (57.4 KB) TX bytes:57432 (57.4 KB)
tap0 Link encap:Ethernet HWaddr f2:46:de:4c:5d:3f
inet addr:10.0.1.53 Bcast:10.0.31.255 Mask:255.255.224.0
inet6 addr: fe80::f046:deff:fe4c:5d3f/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:507 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:21510 (21.5 KB)
root@ip-10-0-1-5:~# ifconfig
br0 Link encap:Ethernet HWaddr 02:a8:cf:d3:0c:c7
inet addr:10.0.1.5 Bcast:10.0.255.255 Mask:255.255.0.0
inet6 addr: fe80::a8:cfff:fed3:cc7/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:139545 errors:0 dropped:0 overruns:0 frame:0
TX packets:118755 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:74239250 (74.2 MB) TX bytes:15543893 (15.5 MB)
eth0 Link encap:Ethernet HWaddr 02:a8:cf:d3:0c:c7
inet6 addr: fe80::a8:cfff:fed3:cc7/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:218200 errors:0 dropped:0 overruns:0 frame:0
TX packets:135485 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:184671619 (184.6 MB) TX bytes:17292772 (17.2 MB)
Interrupt:27
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:4686 errors:0 dropped:0 overruns:0 frame:0
TX packets:4686 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:406941 (406.9 KB) TX bytes:406941 (406.9 KB)
tap0 Link encap:Ethernet HWaddr c2:ed:1d:d3:d1:f4
UP BROADCAST PROMISC MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
root@localhost:~# netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 10.0.2.2 0.0.0.0 UG 0 0 0 eth0
10.0.0.0 0.0.0.0 255.255.224.0 U 0 0 0 tap0
10.0.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
33.33.33.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
root@ip-10-0-1-5:~# netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 10.0.1.1 0.0.0.0 UG 0 0 0 br0
10.0.0.0 0.0.0.0 255.255.0.0 U 0 0 0 br0
# OpenVPN server config file
#
# Generated by Chef - local changes will be overwritten
port 443
proto tcp
dev tap
keepalive 10 120
comp-lzo
local 10.0.1.5
up /etc/openvpn/server.up.sh
down /etc/openvpn/server.down.sh
# Keys and certificates.
ca /etc/openvpn/keys/ca.crt
key /etc/openvpn/keys/server.key # This file should be kept secret.
cert /etc/openvpn/keys/server.crt
dh /etc/openvpn/keys/dh1024.pem
ifconfig-pool-persist /etc/openvpn/ipp.txt
server-bridge 10.0.1.5 255.255.224.0 10.0.1.50 10.0.1.250
user nobody
group nogroup
# avoid accessing certain resources on restart
persist-key
persist-tun
# current client connections
status /etc/openvpn/openvpn-status.log
# logging settings.
log-append /var/log/openvpn.log
verb 1 # don't spam the log with messages.
mute 10 # suppress identical messages > 10 occurances.
script-security 3
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment