centos 搭建open v批n以及使用 + frp_opnsense frp

docker 搭建方法

open v批n  镜像地址 hub.docker.com  地址https://hub.docker.com/r/kylemanna/openvpn
1

docker-compose 搭建方法

1 运行初始化脚本

#1 运行 初始化脚本 init_Openvpn.sh

rm -rf ./datadir/*
docker run --privileged=true -v /data/middleware/openvpn/datadir/:/etc/openvpn --rm kylemanna/openvpn ovpn_genconfig -u tcp://123.456.789:1194

#这个ip关系到客户端配置文件的生成 如果要用公网地址做映射 可以写公网的地址和端口
docker run --privileged=true -v /data/middleware/openvpn/datadir/:/etc/openvpn --rm -it kylemanna/openvpn ovpn_initpki
1
2
3
4
5
6
7

2 启动服务端容器

#docker-compose.yml

version: "2"
services:
  OpenVpn:
    cap_add:
     - NET_ADMIN
    image: kylemanna/openvpn
    container_name: openvpn
    privileged: true
    ports:
     - "1194:1194"
    restart: always
    volumes:
     - ./openvpn/datadir/:/etc/openvpn
     - /etc/localtime:/etc/localtime

  openvpn-frpc:
    image: alpine:latest
    container_name: openvpn-frpc
    privileged: true
    restart: always
    volumes:
     - ./frp/:/frp
    command: [ "/frp/frpc","-c","/frp/frpc.ini" ]
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

#关于frp配置看https://blog.csdn.net/qq_41672211/article/details/121173815

3 生成客户端证书

CLIENTNAME=$1

echo "生成客户端名称 $CLIENTNAME"
ovpn_file="${CLIENTNAME}.ovpn"
echo "start ..."
docker run  --privileged=true -v /data/middleware/openvpn/datadir/:/etc/openvpn --rm -it kylemanna/openvpn easyrsa build-client-full $CLIENTNAME
echo "output ${CLIENTNAME}.open..."
docker run  --privileged=true -v /data/middleware/openvpn/datadir/:/etc/openvpn --rm kylemanna/openvpn ovpn_getclient $CLIENTNAME > $ovpn_file
echo " output ok!"
sz $ovpn_file
echo "下载 ok ！"
rm $ovpn_file
1
2
3
4
5
6
7
8
9
10
11
12

ps 可将本地的端口映射到公网