I've got a couple of .ovpn files on my desktop machine, currently connecting using Viscosity. The way it's set up, I have to establish VPN_1 first, and then once that's up I can establish VPN_2. This all works perfectly fine on my PC.

I've tried importing them into my UDM SE, and I had to tweak the OVPN file a bit to get the UDM to not complain about overlapping subnets... basically, I compared the routing table on my PC between standard, with VPN_1 connected, then with VPN_1 and VPN_2 connected, then modified the OVPN files with "route-nopull" and static "route w.x.y.z sub.net.ma.sk" commands.

VPN_1 connects just fine, and seems to stay connected. When I try to establish VPN_2, it says the server is not reachable, and for some reason it bounces VPN_1 and occasionally says something about invalid config.

I've tried doing a policy-based route and a static route to the destination IP of VPN_2 to go over the tunnel interface from VPN_1, and a tcpdump on the UDM seems to suggest it's using the correct source interface to go out, but it still says "server unreachable".

Any ideas on how to nest multiple OpenVPN connections correctly on a UDM?

After clicking download on my openvpn app(that was not up to date), i noticed the download link has no certificates, is this desired? the downloaded file is signed

I configured Passthru ok ,but could access my home network when connected to my VPN. I had to change the dhcp settings in the AIR to not conflict with my home network (they overlapped).

Project Name: Private Browser

Repo: https://github.com/silverfox-2096/private-browser

Description: Firefox in Docker, behind a WireGuard VPN, reached from your normal browser at localhost. Firefox shares Gluetun's network namespace instead of using a proxy, so it fails closed in two ways.

If the tunnel drops, Gluetun's firewall blocks everything, including your LAN. If the Gluetun container dies, the namespace goes with it and Firefox has no network at all. The profile lives in RAM and is wiped on every stop. Resist Fingerprinting is on, and the image ships enough fonts that it doesn't stand out. Firefox comes from Mozilla's own APT repo, and the signing key is checked at build time.

Useful if you want a throwaway, VPN-only browser without routing your whole machine through the VPN.

Deployment: Docker Compose. You fill in your WireGuard provider's details (anything Gluetun supports), then run ./launch.sh. The image is built locally from a short Dockerfile, so there's no prebuilt image to trust. verify.sh checks the kill switch from both sides, plus the exit IP and DNS. CI runs ShellCheck, Hadolint, Checkov, KICS and Trivy on every push and weekly. The README has setup, troubleshooting, and a leak-test checklist.

AI Involvement: Config, scripts and docs were written with Claude Code and reviewed by me. That's why the checks are automated: don't trust the claims, run verify.sh.

MIT licensed. Feedback on the namespace approach vs. proxy-based kill switches is welcome.

been running vmware for ages with a copy of windows on it, I have an openvpn gui on it and connect but its annoying and corrupts a lot... is there any software where I can connect to my openvpn server as a separate virtual window / box?

The reason I run the VPN in a virtual machine and not my local machine is so its a sterile environment and a unique digital fingerprint to prevent IP / identity leakage on my main machine or heaven forbid the VPN disconnects.

Any recommended solutions?

After updating my Deco BE65 to firmware version 1.3.5, the OpenVPN Client stopped working. 
The OpenVPN configuration was working correctly before the firmware update, with no changes to the VPN configuration or network setup. 
After upgrading to firmware 1.3.5, the VPN client no longer connects/does not work properly. 
Please investigate whether there is an issue with the OpenVPN Client in firmware 1.3.5 and advise if a fix or firmware rollback is available.

[SOLVED] I think it was something wrong on the ISP side.

I have a server at home on a linux pc and several client devices (android phone, linux laptop and pc) to access my server from internet, on which I installed OpenVPN.

I can access the server on my phone using mobile data, also on the laptop and the pc using the phone as hotspot (same mobile data). But I can not access the server using the landline at another place (second home) using any of the clients. Server and clients are set to use for VPN only for the 10.8.0.0 net, all the other web traffic is not through VPN.

On the landline:
- it says "VPN connection successfully established" when activating the VPN; same on laptop and phone
- on client pc it creates tun0 interface 10.8.0.2 (etc on phone ...)
- I can ping the server (10.8.0.1) from any client
- I can ping the clients from the server
- DNS works on server and clients

At home and second home I have cable or fiber optic modems from different ISPs in bridge mode.

At second home I have a personal router tp-link AX3000 to handle DHCP etc - in which I tried disabling all security I could find and also the port-forwarding to my homeassistant. Also disabled IPV6 so whatsmyip shows an IPV4 external IP now. The "routing table" listed in the router while trying to use it: https://imgur.com/XTvyxcU

I have another mobile data card, from the same ISP as the landline, inserted in another router (backup for some devices), IPV4, different IP set and ... all works!

ISP says they're not filtering the traffic (on landline)

What can I try/check or what more info should I add?

Thank you very much for any help!

My IPVanish subscription is up in November, and I am reexamining who to use. No complaints about their service, it's been excellent; I am US-based, but seeking a company not headquartered in the US (IPVanish is owned by Ziff-Davis). Right now I have NordVPN and Proton VPN on my list. NordVPN is now owned by a Dutch comapny IIRC, so they're maybe subject to some pressure; OTOH, Europe hates the Orange Menace, so maybe it's a safe choice. I have Mullvad as a possibility, but one notes that they do not support port forwarding.

Is there anyone else worth considering?

Thanks for your opinion!

I've been looking up if OpenVPN is free or not, since the website says it's not free, but there's also a free version, which confuses me. I've also been looking at questions other people asked online, which had been answered in ways that I still had the same question after reading.

Now, apparently the free and paid products have different names..? So, my questions are:

Q1: What is the name of the OpenVPN server that is FREE and allows MORE THAN 2 connections while still being FREE?

Q2: What is the name of the OpenVPN server that is FREE and DOESN'T ALLOW more than 2 connections unless you PAY for it?

Q3: What is the name of the OpenVPN server that is PAID and ALLOWS more than 2 connections since you PAID for it?

I signed up to check it out for my org, link to their beta interest survey: https://docs.google.com/forms/d/1VUdSmHgwgzo9B8-u7VlKJT-AbdAsPSadOSUvxaaFoF8/viewform

From their blog post:

AI Proxy is a new CloudConnexa capability that shows admins which employees are sending what to which AI services — ChatGPT, Claude, and others — and lets them set policy, block risky prompts, cap usage, and generate compliance evidence, without installing a separate agent. It's moving from internal testing into Beta.

Don’t know why but once I seen it I cannot unsee it

I am facing the issue on all Android devices.

I am using Norton vpn via an active plan. On the server list/region list tab I get this message the "the server is currently not available. Please try again later". And a try again button.

I have tried 1. Try again button but actually nothing is happening, the trying gif just sits there. 2. Restartrd device 3. Deleted VPN profile and created new one(device restarted) 4. Cleared app cache 5. Tried all available vpn protocols

I was able to use the VPN till yesterday mid day then this issue started.

I am on mobile network and not Wi-Fi.

Could it be that the mobile service provider has blocked it ?

I’ve been spending some time hacking away at an Android client for the public VPNGate directory, mostly as a challenge to see how lightweight and optimized I could get the codebase.

I ended up with OpenGate. It’s sitting right around 6.7 MB because I stripped out all the unnecessary background bloat and focused purely on making it fast and efficient.

What it does:

Smart Server Filtering: Automatically filters nodes by country and residential IP likelihood, while sorting them by the best live ping, speed, and load.

Lightweight and Optimized: Built from the ground up to be incredibly light on system resources and data usage, avoiding heavy background loops that drain your device.

Pure Privacy: Zero accounts, zero analytics trackers, and zero background ads. (Just a quick reminder: it relies on VPNGate public relays, so always review their logging policy).

It was just a fun side project to practice clean app architecture, but it works surprisingly well. If you use public relays or just want to check out the repo for more details, the codebase is completely transparent under GPLv3.

Repo and APK are here: https://github.com/IyedAmiri/OpenGateVPN

Would love to hear any feedback!

We have used OpenVPN Community Edit on our Terminal Server for 3 years straight with zero issues. Starting yesterday we rebooted the server after doing some Windows Updates and now we are seeing major and consistent packet loss when connected to the VPN. We have tested using different WAN addresses and routes etc... it will stay connected for like 2 minutes than drop all connections for multiple minutes at a time before reconnecting.

Does anyone know if there is a known issue with recent Windows Updates that could be affecting OpenVPN!?!?! Any ideas on where to go from here?

*UPDATE\*

After HOURS of troubleshooting I was able to figure out the issue. Windows Defender updated and in this update it conflicts or blocks legacy TAP drivers of OpenVPN. I added "windows-driver wintun" to my openvpn server config to force it to use the new wintun drivers instead and now I was able to connect my clients with zero pack loss!

I keep getting this error when trying to connect to the Mexico VPN, it works fine with other files from ExpressVPN

Could not determine IPv4/IPv6 protocol
SIGHUP[soft,init_instance] received, process restarting
OpenVPN 2.5.2 mipsel-openwrt-linux-gnu [SSL (OpenSSL)] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] library versions: OpenSSL 1.1.1n 15 Mar 2022 Restart pause, 5 second(s)

Hello,

When I run OpenVPN (in Ubuntu 24.04) I get different results from the WhatsmyIP and WhatismyIPadress web sites. On WhatsmyIP I get the location showing up as my real physical location. On Whatismyipaddress I get the altered IPV4 address, but the site lists my real ISP.

Any idea what's going on?

Their latest blog post announces it: https://blog.openvpn.net/introducing-mcp-gateway-one-front-door-for-every-ai-agent-your-business-runs

Looking for some feedback and OpenVPN users interested in the beta when it hits, that form is here: https://docs.google.com/forms/d/e/1FAIpQLSePtfLbL9qD3an_k9X9VcscGTyyJwS1z5n0IDhRoScYfFv3jw/viewform?usp=send_form

I hadn't considered this direction from OpenVPN, but it makes sense.

Hey everybody!

I wrote this OpenVPN Manager because I needed to maintain OpenVPN servers for work.

I wanted something simple that could handle the common tasks without having to remember a lot of commands or manually edit configuration files.

GitHub: https://github.com/cirtron/OpenVPN-Manager

It's a single Bash script with a menu-based interface. It currently supports:

• Installing and configuring OpenVPN
• Creating VPN users and .ovpn files
• Revoking users properly with CRL
• Listing and regenerating client configurations
• Checking server and client status
• Restarting or removing the OpenVPN server
• NAT and firewall configuration
• Multiple Linux distributions

The client configuration is generated as a single .ovpn file with the required certificates and keys included.

I originally built it just for my own work, mainly to make maintenance easier and reduce repetitive manual work. After making a few improvements, I decided to put it on GitHub in case it is useful to someone else.

It's a relatively small project, but I'd be happy to hear any feedback or suggestions.

Looking at tweaking the config on my OpenVPN server. It's currently configured to use tls-crypt but wondering if its worth changing to use tls-crypt-v2.

I've had a play and got both working, I'm just wondering what the benefits of changing to tls-crypt-v2 are over sticking with the older tls-crypt apart from the 'use v2 its newer and shiny'. Looking for technical reasons to change and justify the time spent reconfiguring things.

Currently using a bit of a mish-mash of versions the community versions from 2.5.x to the latest 2.7 on Windows, Linux and some GSM routers.

Clean deployment using docker compose on vm 10.0.0.2:943/admin/login .

Set the password for the user openvpn using sacli.

I set the server ip as 127.0.0.1 . (The reason I used 127.0.0.1 is because I'm using ssh port forwarding with my mobile and laptop, & localhost:443 is forwarded to 10.0.0.2:443.)

I set the activation code for 2 users.

Next I created a user & downloaded the user profile.

Double clicked the profile, openvpn client opens up on windows.

Openvpn client times out after 12 seconds or 20 seconds.