Commit Graph

260 Commits

Author SHA1 Message Date
hwdsl2
095ad8b1aa Update docs 2022-12-23 20:58:33 -06:00
hwdsl2
f05bf31083 Improve sysctl settings
- For enabling TCP BBR congestion control, add a check to make sure
  tcp_congestion_control exists.
2022-11-20 15:05:02 -06:00
hwdsl2
0a76ae48f8 Update docs 2022-11-19 10:23:48 -06:00
hwdsl2
d394509c7e Bugfix
- Fixed an issue with IPTables rules not persisting after a reboot,
  if both IPsec VPN and OpenVPN are installed on the same server.
  We restart the openvpn-iptables.service in /etc/rc.local to make
  sure the rules are added.
  Ref: https://github.com/hwdsl2/wireguard-install/issues/2
2022-11-17 08:50:54 -06:00
hwdsl2
5dc64ce424 Update docs 2022-11-14 03:08:55 -06:00
hwdsl2
16dcef19e7 Update docs 2022-11-10 03:15:35 -06:00
hwdsl2
f86bc01ba3 Update docs 2022-11-01 23:51:47 -05:00
hwdsl2
824d59772e Improve setup
- Refactor setup script into functions for better readability and
  easier maintenance.
2022-11-01 01:19:16 -05:00
hwdsl2
6bdb4cc635 Improve sysctl settings 2022-10-31 01:30:18 -05:00
hwdsl2
6c1d25897f Cleanup 2022-10-28 08:59:09 -05:00
hwdsl2
5e8fa9ec3c Update docs 2022-10-25 00:20:56 -05:00
hwdsl2
9d7f285447 Add templates 2022-10-17 22:46:47 -05:00
hwdsl2
dfc71f7cae Update docs 2022-10-16 16:08:17 -05:00
hwdsl2
ccac14693c Update docs 2022-10-14 22:07:21 -05:00
hwdsl2
45b9732428 Update tests 2022-10-14 01:26:11 -05:00
hwdsl2
c1e9ebd446 Update to easy-rsa v3.1.1
- Apply upstream change Nyr/openvpn-install commit f943387,
  with enhancements.
- --no-install-recommends is now required for Debian.
- Cleanup
2022-10-13 22:46:16 -05:00
hwdsl2
b9c2ff1719 Change "block-outside-dns" placement
- Apply upstream change Nyr/openvpn-install commit f2c44de.
- This is mainly to work around a bug in Viscosity for macOS.
2022-10-13 22:35:22 -05:00
hwdsl2
6a5e5959d1 Update docs 2022-10-11 01:31:40 -05:00
hwdsl2
14695679ec Update docs 2022-10-09 22:21:37 -05:00
hwdsl2
dab8eaebcf Cleanup 2022-10-09 16:16:34 -05:00
hwdsl2
ff1ea0208f Update tests 2022-10-04 23:50:36 -05:00
hwdsl2
d189d735e3 Improve IP check
- Install iproute (for the "ip" command) in the unlikely cases that
  it is not already installed.
- Abort and exit if server IP cannot be detected.
- Cleanup
2022-10-04 23:50:06 -05:00
hwdsl2
c7de2ced33 Update docs 2022-10-04 18:06:49 -05:00
hwdsl2
6335bb496e Add tests 2022-10-04 00:47:10 -05:00
hwdsl2
e47b7c5030 Add header 2022-10-03 21:25:09 -05:00
hwdsl2
32a3c5bf06 Update docs 2022-10-02 23:18:07 -05:00
hwdsl2
20e9a5af75 Cleanup 2022-10-01 23:58:30 -05:00
hwdsl2
ec0b84ae67 Update docs 2022-10-01 23:38:05 -05:00
hwdsl2
b07d70376e Add usage 2022-10-01 23:30:55 -05:00
hwdsl2
0e2fd697a6 Cleanup 2022-10-01 23:27:52 -05:00
hwdsl2
be201f6445 Update docs 2022-10-01 15:36:45 -05:00
hwdsl2
bd1c572861 Improve reliability
- Wrap the script in a function to guard against partial download.
2022-10-01 15:01:25 -05:00
hwdsl2
01865085c6 Support auto install
- Support automatic install using default options. To do this,
  users can add the argument "--auto" when running the script.
- Cleanup
2022-10-01 14:50:01 -05:00
hwdsl2
1b20eadf22 Improve listing clients
- When listing existing clients, show total and improve output.
2022-09-26 22:08:59 -05:00
hwdsl2
7c754961aa Update docs 2022-09-25 22:53:06 -05:00
hwdsl2
ada0f9f853 Add list clients option
- Add an option to list existing clients.
2022-09-25 22:45:22 -05:00
hwdsl2
068dd9bb8e Cleanup 2022-09-24 20:53:28 -05:00
hwdsl2
c9d6a2f0b9 Update docs 2022-09-23 00:11:10 -05:00
hwdsl2
390bb904ae Improve user input
- On servers with multiple IPv4, use the IP address on the default
  route, instead of asking the user to select.
2022-09-22 00:17:19 -05:00
hwdsl2
bce57f9608 Improve IP check
- Use two different services for getting the server's public IP.
  This improves reliability in case one of them is unavailable.
- Cleanup
2022-09-20 23:22:43 -05:00
hwdsl2
ff40c115d1 Improve user input
- On servers with multiple IPv4 addresses, check if one of them
  matches the server's public IP. If so, select that IP and skip
  the IP selection question.
- If the server is behind NAT, try to find its public IP and
  ask the user only if the IP cannot be found.
- Cleanup
2022-09-20 01:28:42 -05:00
hwdsl2
01f32b74a3 Update docs 2022-09-20 00:10:54 -05:00
hwdsl2
ef33b06a44 Improve client DNS
- Allow specifying custom DNS server(s) for VPN clients.
- Use Google Public DNS as the default option.
- Cleanup
2022-09-20 00:06:09 -05:00
hwdsl2
f36ae201b4 Update docs 2022-09-19 21:41:25 -05:00
hwdsl2
f4f7119ae6 Cleanup 2022-09-19 21:40:46 -05:00
hwdsl2
6cbbca398a Improve client revocation
- When revoking a client, remove previously generated client config
  file for the client.
- Cleanup
2022-09-10 00:11:04 -05:00
hwdsl2
efbe7739d3 Improve setup
- When uninstalling the VPN, disable IP forwarding.
2022-09-09 08:53:03 -05:00
hwdsl2
401edc5bde Optimize sysctl settings
- Improve VPN performance by optimizing sysctl settings, such as tuning
  TCP buffer sizes and enabling the TCP BBR congestion control algorithm
  on supported systems (kernel versions 4.20 and newer).
- References:
  https://cloud.google.com/blog/products/networking/tcp-bbr-congestion-control-comes-to-gcp-your-internet-just-got-faster
  https://github.com/google/bbr/blob/master/Documentation/bbr-quick-start.md
  https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/bbr.md
2022-09-08 23:33:56 -05:00
hwdsl2
fb7de43826 Improve user input
- When adding, exporting or revoking a client, abort and exit if
  the user enters an empty client name or client number.
2022-09-02 23:39:09 -05:00
hwdsl2
3994091cb5 Add client export option
- Add an option to export configuration for an existing client.
2022-09-02 23:24:10 -05:00