OpenWRT + VPN on Rpi 4

Mar 11, 2020 17 Replies

I have installed OpenWRT on my Rpi 4 and have things set up so that I can share USB-tethered connection to LAN ... but now I think I would rather make Rpi run VPN and not all the devices inside the LAN ... What I have learned by searching is that some have had issues with earlier Rpi's and some have not had issues :D



Anyone have set up VPN on RPi 4 and could give some pointers?


/ Bud /



a1=S0 b1=[1..2,'L0L'] a2=2*a1 a3=S1.4#b1 a4=(a2,a3) a5=64*a4


VPN is a pretty wide concept. If you have an idea of the other end of the tunnel, you should look at compatible pieces of software.

I'm running an OpenVPN server on an older Raspberry, which also serves as a firewall/router, name cache server, DHCP server and NTP server. Everything runs smoothly.

You have to watch the Pi4 temperature or provide good coolling if you're going to make it run 24/7.

For starters, google for 'openvpn'.

-TV

With the newest firmware updates (for a while now) I have not had any temperature problems on my Pi4 which is in a heatsink case. Idle always between 39-41 degrees, spikes to 48 when running Mathematica interactively.

Looks interesting but ... "Currently this installer supports Raspbian, Debian and Ubuntu."

/ Bud /

a1=S0 b1=[1..2,'L0L'] a2=2*a1 a3=S1.4#b1 a4=(a2,a3) a5=64*a4

On Wed, 11 Mar 2020 22:34:01 +0200, Bud Spencer declaimed the following:

Based upon

formatting link
""" Visit the PiVPN site for more information. This is a set of shell scripts initially developed by @0-kaladin that serve to easily turn your Raspberry Pi (TM) into a VPN server using two free, open-source protocols:

WireGuard OpenVPN """ PiVPN is just a set of convenience scripts for installing and managing the two named VPN systems...

I would suggest looking at "Method 3", which would allow you to study/modify the installer script for your OS. Probably going to need to change the section that handles the package repositories and upgrades, especially if OpenWRT does not use DEB packages -- you'll have to insert whatever OpenWRT uses to manage installing packages... OR MORE LIKELY, download and build either WireGuard or OpenVPN from source files..

Wulfraed Dennis Lee Bieber AF6VN wlfraed@ix.netcom.com http://wlfraed.microdiversity.freeddns.org/

OpenWRT is a router OS, and OpenVPN (if that's what the OP wants) is already supported:

formatting link

In general it's always better to go with your distro's way of doing things, rather than port something from another distro (unless very similar).

However the OP didn't give us enough info as to what they actually want to

*do*, so we're in the dark as to whether this is a good solution for them.

Theo

Thank you for the hyperlink Theo!

But I'm not schizophrenic nor Legion.

What *I* want to do is to have my RPi use OpenVPN for the URB-tethered internet connection, which is then shared to LAN.

Now that I think of it, it might be nice that it would randomize for every connection ... but that's not really needed.

Apparently nobody has personal experience and cannot give any pointers if there is something one need to take in account when doing this on RPi 4. So I'll just get to it when I get time to do so.

Thanks for all the replies! *They* were useful nonetheless.

/ Bud /

a1=S0 b1=[1..2,'L0L'] a2=2*a1 a3=S1.4#b1 a4=(a2,a3) a5=64*a4

formatting link

Chris Elvidge, England

Thanks, so you've now explained the problem and said the magic words 'OpenVPN' which means we know where we are. That's an 'OpenVPN client' and so these instructions apply:

formatting link

I'm assuming you're paying somebody for an OpenVPN server on the internet somewhere? Rather than running your own server on a cloud server somewhere?

There's nothing special about an RPi if you're running OpenWRT, it's just another OpenWRT box. Don't try and hack around your system with scripts designed for running on other OSes on a Pi - it's all already integrated into OpenWRT.

The main thing is the Pi has no hardware crypto acceleration so your performance might be limited by the Pi 4's CPU. Probably not an issue unless you're pushing hundreds of Mbps.

Theo

That bugs me too, but it's increasingly accepted as the correct gender-neutral form.

Well, it *has* been used as such for a very long time. See e.g. Wiktionary: "(singular pronoun): Usage of they as a singular pronoun began in the 1300s and has been common ever since, despite attempts by some grammarians, beginning in 1795,[5] to condemn it as a violation of traditional (Latinate) agreement rules." So, its use doesn't conform to the rules of

See also the wiki article:

formatting link

It's in common use in the UK (the OED first cite is 1450). My US editors sometimes pick it up, but my argument is it's better than writing 'he/she/it' all over the place, or arbitrarily assigning a gender to an unknowable person.

Theo

For what it's worth, Theo's reply to Dennis Lee Bieber /could have/ said "However, Bud Spencer didn't give us enough info..." (the post that Theo replied to contained Bud Spencer's name as part of the quote attribution line), and avoided this "gender-neutral pronoun" issue entirely.

Prior to that reply, I saw no sign that Bud Spencer preferred one self- referential pronoun over another. How about we, where-ever possible, just use proper nouns instead of guessing about (or railing against) the (improper?) use of pronouns, gender-neutral or not?

Lew Pitcher "In Skills, We Trust"

That was going to be my suggested solution - instead of he/she/it use "that person" or similar if no better noun can be deduced from the available information. Although I may have occasionally used "s/he".

Someone once suggested "s/h/it".

/~\ Charlie Gibbs | Microsoft is a dictatorship. \ / | Apple is a cult. X I'm really at ac.dekanfrus | Linux is anarchy. / \ if you read it the right way. | Pick your poison.

And can I suggest we talk about this sort of s*it somewhere else?

---druck

Fair point - I was just tidying and found some R-Pis and cameras I bought before Christmas, so I'll be back on topic for a bit, even if I don't post about it ...

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required