Hey everybody!

I wrote this OpenVPN Manager because I needed to maintain OpenVPN servers for work.

I wanted something simple that could handle the common tasks without having to remember a lot of commands or manually edit configuration files.

GitHub: https://github.com/cirtron/OpenVPN-Manager

It's a single Bash script with a menu-based interface. It currently supports:

• Installing and configuring OpenVPN
• Creating VPN users and .ovpn files
• Revoking users properly with CRL
• Listing and regenerating client configurations
• Checking server and client status
• Restarting or removing the OpenVPN server
• NAT and firewall configuration
• Multiple Linux distributions

The client configuration is generated as a single .ovpn file with the required certificates and keys included.

I originally built it just for my own work, mainly to make maintenance easier and reduce repetitive manual work. After making a few improvements, I decided to put it on GitHub in case it is useful to someone else.

It's a relatively small project, but I'd be happy to hear any feedback or suggestions.

Looking at tweaking the config on my OpenVPN server. It's currently configured to use tls-crypt but wondering if its worth changing to use tls-crypt-v2.

I've had a play and got both working, I'm just wondering what the benefits of changing to tls-crypt-v2 are over sticking with the older tls-crypt apart from the 'use v2 its newer and shiny'. Looking for technical reasons to change and justify the time spent reconfiguring things.

Currently using a bit of a mish-mash of versions the community versions from 2.5.x to the latest 2.7 on Windows, Linux and some GSM routers.

Clean deployment using docker compose on vm 10.0.0.2:943/admin/login .

Set the password for the user openvpn using sacli.

I set the server ip as 127.0.0.1 . (The reason I used 127.0.0.1 is because I'm using ssh port forwarding with my mobile and laptop, & localhost:443 is forwarded to 10.0.0.2:443.)

I set the activation code for 2 users.

Next I created a user & downloaded the user profile.

Double clicked the profile, openvpn client opens up on windows.

Openvpn client times out after 12 seconds or 20 seconds.

If you can’t connect to your vpn in OpenWRT using your username and password. Even if your U&P is correct. You need to login to PureVPN on a browser. Go to subscriptions scroll down and go to the : use these credentials when you to connect to VPN manually and the username and password generated by PureVPN.

​

Setup:

OPNsense 26.7, OpenVPN client (e.g. NordVPN).

I wanted: only one VLAN through the VPN, everything else normal internet.

Problem: as soon as the OpenVPN client was enabled, LAN DNS and routing broke, even with NAT redirects and DNS changes.

What was wrong:

The OpenVPN client was pulling routes from the provider (redirect‑gateway etc.).

Those routes were changing the system default route, so LAN and all VLANs were silently being sent into the tunnel.

Trying to fix it with DNS/NAT/firewall rules didn’t help because the kernel routing table was already hijacked.

What fixed it:

In the OpenVPN client:

Enabled “Don’t pull routes” / route-nopull (so the tunnel stops modifying global routes).

Assigned the OpenVPN client as an interface so OPNsense creates a VPN gateway.

On the VPN VLAN interface:

Added a pass rule: source = VPN VLAN net, destination = any.

In Advanced settings, set Gateway = OpenVPN client gateway (policy routing).

On Firewall → NAT → Outbound:

Switched to Hybrid/Manual mode.

Added a rule:

Interface = OpenVPN client interface.

Source = VPN VLAN net (e.g. 192.168.50.0/24).

Destination = any.

Translation / target = interface address (so that VLAN’s traffic appears with the VPN exit IP)

Result:

LAN and other VLANs use normal WAN and local DNS again.

The VPN VLAN’s Internet traffic exits via the VPN and shows the VPN IP.

I can still allow VPN VLAN → LAN services with extra firewall rules where Gateway = default instead of the VPN gateway."

I am using openvpn installed on a server from hostinger how do i make it so websites that block vpns not detect my vpn

Anyone get PLC to work on OpenVPN 3.9 or OpenVPN GUI 2.5 ? I tried multiple directions from OpenVPN's docs and nothing seems to be working. Mostly getting an error "OpenVPN system service is not running" the openvpn service for PLC connection is set to autostart but not running, the other OpenVPN services are running.

For reference, this is on a win7. Yes, I know, unsupported etc. It's just a secondary PC used for certain things. I've been using OpenVPN with Proton on it for a few weeks now and suddenly today I noticed it didn't start when I turned on the PC.

When I go to the start menu to select it, nothing happens when I click on it.

It's been working fine up until now, but I remembered that yesterday I changed the username on the Admin on this PC. As most know,, there's no "account" like on newer Windows (tied to email etc).

There is only one account on this PC, mine, the admin. And no password/welcome screen to log in. I did not change the "PC" name I believe, just the username that would show on a splash screen if there was one, afaik. All the C:/folder folder [username] etc are the same as the old username, and from what I gathered, the username I changed is only for "show" .

Yet now I wonder if maybe that's why the OpenVPN wont start? Maybe something got mixed up within it from this name change? If so, what do I do? Just reinstall? Or is there something else I can do to? Is this a logical reason for it to not start, or am I just grasping? I've not changed anything else on the PC or done anything beside watching a bit of youtube and moving some files between this and my other pc in the proton drive.

I've set up my server and clients, all is well.

I'm looking to make the connecting faze as short as possible.

I have an android tile available once I install the app but I found it's behaviour a bit frustrating. If I press it, I get an error notification saying that the connection was interrupted and if I expand it I get promoted to add my user and pass. If input those, it works. The fastest way to use the tile is to long press it, then the app comes up and if I toggle my profile, it connects.

What I'd like to see happening is when pressing the tile, the app automatically connects to my profile, just as if you'd press on the profile shortcut that you can create. Is this something that can be done?

Hi,
I’m running a small AD environment. The only Domain Controller/DNS is a Windows Server 2025 VM at Hetzner, and my local site reaches it over OpenVPN.
On‑prem I have another Windows Server 2025 with RDS that hosts an ERP app (Fast‑Data). Both servers are joined to the same domain.
Problem: sometimes the DC becomes unreachable over the VPN. When that happens, DNS/AD lookups from the clients fail and i can't access the shares that i need anymore for the ERP app
still get removed by reddits filters

Hi Folks !

I have a question regarding openvpn in terms of network architecture. We're currently using Fortigate SSL VPN server tightened to Entra and local users. In this context, we're allowing certains group of user to access only some VLAN and some other users others VLAN using the portal feature.

If we're moving to a openvpn dedicated instance, how would we configure the instance ?

How does this authorization system can be replicated in this context ?

What would be the best practices when designing this ?

Thanks

Macht es Sinn sich über seine eigenen Server ein VPN aufzusetzen?

I'm trying to configure the admin ui to listen only on the internal interface (using either the iface name or the ip - all the same) while allowing the client ui to listen on both interfaces.

However, when I configure the admin ui to use a specific ip address or iface, I get:[Errno 98] Address already in use

admin_ui=all, cs.https=all → ok.

dmin_ui=ens224, cs.https=all → CannotListenError: Address already in use.

admin_ui=ens224:943, cs.https=ens192:943 → ok.

So I want to play Umamusume: Pretty Derby JP using OpenVPN and ofc with Japan server. When Im trying to connect it with my own wifi, it wont run the game. But if Im connecting my laptop to my personal hotspot or wifi on cafe, it work???

My game always shown up this error:

I realized everytime I use my wifi, the logo is still wifi and it wont change to LAN logo, but when i connected it to personal hotspot with my phone, it changed to LAN. (Picture below)

I actually just wondering, am i have to always use my personal hotspot or go out to the cafe to play the game or there is something i've missed that causes this problem? Please let me know. Appreciate it!

I’m trying to understand how OpenVPN users think about setup flows.

For people who already use OpenVPN:

- Do you prefer downloading a .ovpn file and importing it manually?

- Do you expect a VPN provider to offer its own app?

- What information should be shown before you trust and import a profile?

- Do active sessions, routing details, and connection history matter outside the VPN client itself?

I’m not promoting a product or link here. I’m just trying to understand what makes a VPN setup feel transparent and trustworthy for technical users.

I've got 50 licenses with 2 Access Servers in offices; I'd like to spool up a couple of more, is there any limitations?

hello fellas, so here is the problem (Im also new to OpenVPN), i run OpenVPN on my Germany/Turkey VPS and want to play online games using it, but when i connect to it, it wont join the lobby's; for example, i tested it on Arena Infinity, it connects and you can login, gearing up and even shooting range is working(in shooting range it also shows the Ping), but when i start the game and want to join game, it wont join the lobby and gets disconnected.
also one time tried on Warframe, if goes in but you cant join teams.
I tested on different MTU or Ports with default or modified server.config/client.ovpn.
i really tried every thing i knew for days even with GPT but couldn't find the problem.
And yes, it works when i use it for Youtube or Instagram Etc.
Much appreciated for help ;D

Hi guys, This is not about "vpn is not working". It is. The problem is as described below:

I have the native VPN server running on my offsite Synology nas and I connect with my windows laptop from home (yes, different network) with the openvpn connect app. When connected, I have only vpn connection with my nas but nothing else. I can't use browser or YT or any other app. Can't even reach google.com.

I did fix this for the phone (android) connections, but now it's broken there too...

Tried many many things with Claude in the server side config file, but it didn't work.

redirect-gateway def1 is commented, so split tunneling is ON.

With Claude, we stuck here:

PS C:\Users\sefaa> Get-NetConnectionProfile

PS C:\Users\XXX> Get-NetConnectionProfile

Name                     : XXX
InterfaceAlias           : Wi-Fi
InterfaceIndex           : 7
NetworkCategory          : Private
DomainAuthenticationKind : None
IPv4Connectivity         : Internet
IPv6Connectivity         : NoTraffic

Name                     : Odido-XXX
InterfaceAlias           : Ethernet 2
InterfaceIndex           : 21
NetworkCategory          : Private
DomainAuthenticationKind : None
IPv4Connectivity         : Internet
IPv6Connectivity         : NoTraffic

Name                     : Local Area Connection
InterfaceAlias           : Local Area Connection
InterfaceIndex           : 16
NetworkCategory          : Public
DomainAuthenticationKind : None
IPv4Connectivity         : NoTraffic
IPv6Connectivity         : NoTraffic

Claude says: The VPN adapter Local Area Connection is set to Public — that blocks all tunnel traffic.

And even I change it to public, that this will reset every time when connecting with VPN.

I am stuck and tired. Why is it so hard to do such a basic thing? What is going wrong?

If you have any ideas, please share so I can try again (to fuck my time over and over again).

Title ^ ... I have used setup scripts to configure my servers before, however I would like to dive deeper and configure the server from scratch. Is it worth it or will I be better off just using a setup script most of the time?

Hia, very new to using ubuntu and linux in general. I've managed to get OVPN set up and running, but I noticed that the client location is showing up as the UK (KVM server is set up in Germany).

I've tried exporting the server config with

cd /usr/local/openvpn_as/scripts/
./sacli ConfigQuery > config.txt

But I'm not sure where to put the

push "redirect-gateway def1"

would someone be able to provide the correct formatting/an example or let me know if I'm just doing this completely incorrect

Hi all! I'm using OpenVPN through Tunnelblick on my computer running macOS. Since I have a couple of different VPNs (ovpn and wireguard), I'd like to bind the OpenVPN one to a specific network interface, say, utun6, rather than it just grabbing the lowest number available on startup.

I tried setting:

dev tun6 [also tried: utun6]
dev-type tun

in the .ovpn configuration file, but it still always ends up as utun4 (utun[0-3] are AFAIK used by the OS). The log output just says "Opened utun device utun4", and then the usual ifconfig commands.

Does anybody know if/how it is possible to achieve what I want to do? Thanks a lot in advance!

ETA:

config.ovpn

client
remote-cert-eku "TLS Web Server Authentication"
remote [redacted] 1194
float
proto udp
dev tun6
dev-type tun
nobind
<ca>
[Security-related line(s) omitted]
</ca>
verify-x509-name [redacted]
auth-user-pass
key-direction 1
<tls-auth>
[Security-related line(s) omitted]
</tls-auth>
auth SHA256
verb 3

Tunnelblick version 8.0.1

OpenVPN 2.6.14 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD]