docker核心技术分享搭建OpenVPN服务只需5分钟搞定！

OpenVPN是款开源的VPN服务软件, 大家可以在自己的服务器上部署.
由于采用了非对称加密算法, 保证数据传输的安全, 不被恶意偷窥.
但是部署过程中, 涉及很多文件(CRT+KEY). 稍不注意, 就会遗漏.
借助于Docker, 就可以在短短5分钟之内, 搭建一个OpenVPN服务.

下载服务包

https://wfuzz.com/open/openvpn.tgz

https://wfuzz.com/open/centos.tgz

导入服务包 gunzip -c centos.tgz | docker load

导入服务包 gunzip -c openvpn.tgz | docker load

打开阿里云解析添加一条解析记录

[[email protected] open]# cat setup.sh
#!/bin/bash
#
# setup script for kylemanna/openvpn
#

OVPN_DIR=./ovpn
OVPN_SERVER=tcp://openvpn.wfuzz.com #温馨提示此处可以自定义域名和使用协议走UDP协议比较快！

mkdir -p $OVPN_DIR

select opt in server client revoke quit
do
if [[ $opt == “server” ]]
then
    echo “setup server …”
    docker-compose run –rm openvpn ovpn_genconfig -u $OVPN_SERVER
    docker-compose run –rm openvpn ovpn_initpki
elif [[ $opt == “client” ]]
then
    echo “setup client …”
    read -p ‘>>> ‘ OVPN_CLIENT
    docker-compose run –rm openvpn easyrsa build-client-full ${OVPN_CLIENT:?client is empty} nopass
    docker-compose run –rm openvpn ovpn_getclient $OVPN_CLIENT > $OVPN_DIR/$OVPN_CLIENT.ovpn
elif [[ $opt == “revoke” ]]
then
    echo “revoke client …”
    read -p ‘>>> ‘ OVPN_CLIENT
    docker-compose run –rm openvpn easyrsa revoke ${OVPN_CLIENT:?client is empty}
    docker-compose run –rm openvpn easyrsa gen-crl
elif [[ $opt == “quit” ]]
then
    echo “bye”
    exit
else
    echo “invalid”
fi
done

生成客户端

[email protected] open]# cat docker-compose.yml
openvpn:
image: kylemanna/openvpn
ports:
    – “1194:1194/tcp”
volumes:
    – ./data:/etc/openvpn
cap_add:
    – NET_ADMIN
restart: always