使用docker快速搭建openvpn

1 概述

本文用来教大家怎样快速使用docker搭建openvpn，话不多说直接进入正题。
2 摆设

2.1 情况需求

需要有外网IP。
2.2 步骤。

1. docker pull kylemanna/openvpn:2.4
2. #生成配置文件
3. #fu服务器公网 公网IP
4. docker run -v /opt/apps/openvpn:/etc/openvpn --rm kylemanna/openvpn:2.4 ovpn_genconfig -u udp://公网IP
5. #生成密钥文件
6. docker run -v /opt/apps/openvpn:/etc/openvpn --rm -it kylemanna/openvpn:2.4 ovpn_initpki
8. [root@VM-24-9-centos openvpn]# docker run -v /opt/apps/openvpn:/etc/openvpn --rm -it kylemanna/openvpn:2.4 ovpn_initpki
10. init-pki complete; you may now create a CA or requests.
11. Your newly created PKI dir is: /etc/openvpn/pki
14. Using SSL: openssl OpenSSL 1.1.1g  21 Apr 2020
16. Enter New CA Key Passphrase: 12345678
17. Re-Enter New CA Key Passphrase: 12345678
18. Generating RSA private key, 2048 bit long modulus (2 primes)
19. ..........................+++++
20. .....................................................................................+++++
21. e is 65537 (0x010001)
22. You are about to be asked to enter information that will be incorporated
23. into your certificate request.
24. What you are about to enter is what is called a Distinguished Name or a DN.
25. There are quite a few fields but you can leave some blank
26. For some fields there will be a default value,
27. If you enter '.', the field will be left blank.
28. -----
29. Common Name (eg: your user, host, or server name) [Easy-RSA CA]:WEIHU
31. CA creation complete and you may now import and sign cert requests.
32. Your new CA certificate file for publishing is at:
33. /etc/openvpn/pki/ca.crt
36. Using SSL: openssl OpenSSL 1.1.1g  21 Apr 2020
37. Generating DH parameters, 2048 bit long safe prime, generator 2
38. This is going to take a long time
39. .....................................................................................................................................+.......................................................................+...................+........................................+......................................................................+......................................................................+..............+........+..............................................................................................................................................................................................+.......................................................+................................................................................................................................................+...........................................+...................................................................+.................................................................................................................................................................................................................................................................................................................................................+..........................................................................................+..........+.......................................................+....................+.......................................................................................................................................................+...........................+.....................................................................................................................................................+.................................................................................+.............+.............................................+..............................................+...................................+.......................................................................+.......................................................................................+..........................+........................................................................+...........................................................................................................+...................................................................................................................................................................................................+................................................................................................................................................................................................................+.....................................................................+................................................................................+......................................+..................................................................................................................+.................................................................+........+.............+................................................................................................................................................................................................................+.....................................................................+......................................................+..............................+.....................................................................+..........................................................................................................................................................................................................................+...........................................+.........................+.................................................................................................................................................+................................................................................................................................+............................................................................................................................................+................................................................................................................................................................................+..........................................................................................+................................................................................+...........................................................+......................................+...................................................................................................................................................................................................................................................................................................................................................................................................................................+.............................................+................................................................................................................................................+.......................+.........................................................+.........................+..............................................................................................+.+.............................+.....................................................................................................................................................+..........+...........................+...+........................................+.....+...................................+...................................................................+.............+...................................+............................................................................................................................................................................................................................................................................................................................................................................................+................................+.................................................................................................................................................................+.............................+................................+..................................................+..............................................................................................................................+......................................................................................++*++*++*++*
41. DH parameters of size 2048 created at /etc/openvpn/pki/dh.pem
44. Using SSL: openssl OpenSSL 1.1.1g  21 Apr 2020
45. Generating a RSA private key
46. ........................+++++
47. ........................................................+++++
48. writing new private key to '/etc/openvpn/pki/easy-rsa-72.obdilb/tmp.OkeLiC'
49. -----
50. Using configuration from /etc/openvpn/pki/easy-rsa-72.obdilb/tmp.lAFMAn
51. Enter pass phrase for /etc/openvpn/pki/private/ca.key:
52. Check that the request matches the signature
53. Signature ok
54. The Subject's Distinguished Name is as follows
55. commonName            :ASN.1 12:'82.157.165.162'
56. Certificate is to be certified until Sep 17 00:59:32 2024 GMT (825 days)
58. Write out database with 1 new entries
59. Data Base Updated
61. Using SSL: openssl OpenSSL 1.1.1g  21 Apr 2020
62. Using configuration from /etc/openvpn/pki/easy-rsa-147.MolDfl/tmp.faLnEK
63. Enter pass phrase for /etc/openvpn/pki/private/ca.key:12345678
65. An updated CRL has been created.
66. CRL file: /etc/openvpn/pki/crl.pem
69. [root@VM-24-9-centos openvpn]#
72. #生成客户端证书（这里的weihu改成你想要的名字）
73. docker run -v /opt/apps/openvpn:/etc/openvpn --rm -it kylemanna/openvpn:2.4 easyrsa build-client-full weihu nopass
75. [root@VM-24-9-centos openvpn]# docker run -v /opt/apps/openvpn:/etc/openvpn --rm -it kylemanna/openvpn:2.4 easyrsa build-client-full weihu nopass
76. Using SSL: openssl OpenSSL 1.1.1g  21 Apr 2020
77. Generating a RSA private key
78. ...+++++
79. ....................................................................................+++++
80. writing new private key to '/etc/openvpn/pki/easy-rsa-1.hDjaFE/tmp.AjJCaO'
81. -----
82. Using configuration from /etc/openvpn/pki/easy-rsa-1.hDjaFE/tmp.LJIhlM
83. Enter pass phrase for /etc/openvpn/pki/private/ca.key: 12345678
84. Check that the request matches the signature
85. Signature ok
86. The Subject's Distinguished Name is as follows
87. commonName            :ASN.1 12:'weihu'
88. Certificate is to be certified until Sep 17 01:01:23 2024 GMT (825 days)
90. Write out database with 1 new entries
91. Data Base Updated
93. [root@VM-24-9-centos openvpn]#
95. #导出客户端配置
96. mkdir -p /opt/apps/openvpn/conf
97. docker run -v /opt/apps/openvpn:/etc/openvpn --rm kylemanna/openvpn:2.4 ovpn_getclient weihu> /opt/apps/openvpn/conf/weihu.ovpn
98. #启动OpenV服务
99. docker run --name openvpn -v /opt/apps/openvpn:/etc/openvpn -d -p 8000:1194/udp --cap-add=NET_ADMIN kylemanna/openvpn:2.4
100. PS：
101. 停止 openvpn
102. docker stop openvpn
103. 启动 openvpn
104. docker start openvpn
106. #设置防火墙 （这个先不加也可以用）
107. iptables -t nat -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
108. iptables -t nat -A POSTROUTING -s 172.17.0.2/32 -d 172.17.0.2/32 -p udp -m udp --dport 1194 -j MASQUERADE
109. iptables -t nat -A DOCKER -i docker0 -j RETURN
111. iptables -t nat -A DOCKER ! -i docker0 -p udp -m udp --dport 1194 -j DNAT --to-destination 172.17.0.2:1194
112. iptables -t nat -A POSTROUTING -s 172.17.0.2/32 -d 172.17.0.2/32 -p udp -m udp --dport 1194 -j MASQUERADE
113. ipconfig-save
115. #创建用户脚本 user_create.sh
116. #!/bin/bash
117. read -p "please your username: " NAME
118. docker run -v /opt/apps/openvpn:/etc/openvpn --rm -it kylemanna/openvpn:2.4 easyrsa build-client-full $NAME nopass
119. docker run -v /opt/apps/openvpn:/etc/openvpn --rm kylemanna/openvpn:2.4 ovpn_getclient $NAME > /opt/apps/openvpn/conf/"$NAME".ovpn
121. #删除用户脚本 user_del.sh
122. #!/bin/bash
123. read -p "Delete username: " DNAME
124. docker run -v /opt/apps/openvpn:/etc/openvpn --rm -it kylemanna/openvpn:2.4 easyrsa revoke $DNAME
125. docker run -v /opt/apps/openvpn:/etc/openvpn --rm -it kylemanna/openvpn:2.4 easyrsa gen-crl
126. docker run -v /opt/apps/openvpn:/etc/openvpn --rm -it kylemanna/openvpn:2.4 rm -f /etc/openvpn/pki/reqs/"$DNAME".req
127. docker run -v /opt/apps/openvpn:/etc/openvpn --rm -it kylemanna/openvpn:2.4 rm -f /etc/openvpn/pki/private/"$DNAME".key
128. docker run -v /opt/apps/openvpn:/etc/openvpn --rm -it kylemanna/openvpn:2.4 rm -f /etc/openvpn/pki/issued/"$DNAME".crt
130. #需要重启openvpn
131. docker restart openvpn

复制代码

2.3 参考地址

   https://blog.csdn.net/qq_42761569/article/details/106538056
  码字不易，请点赞收藏。


免责声明：如果侵犯了您的权益，请联系站长，我们会及时删除侵权内容，谢谢合作！更多信息从访问主页：qidao123.com:ToB企服之家，中国第一个企服评测及商务社交产业平台。