{"id":53240,"date":"2019-11-27T00:00:00","date_gmt":"2019-11-26T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/zapuskaem-openvpn-v-dokere-za-2-sekundy"},"modified":"2020-02-18T14:01:07","modified_gmt":"2020-02-18T11:01:07","slug":"zapuskaem-openvpn-v-dokere-za-2-sekundy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/zapuskaem-openvpn-v-dokere-za-2-sekundy","title":{"rendered":"K\u00e4ivitame OpenVPN-i Dockeri sees 2 sekundiga","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tere, Habr'ite! Olenud olete kunagi sattunud olukorda, kus on v\u00e4ga soov olnud virtuaalselt teise linna, riiki v\u00f5i isegi teisele kontinendile reisida? Mul on selline vajadus sageli, seega on minu jaoks v\u00e4ga oluline omada VPN-serverit, mida saab sekundite jooksul igal pool \u00fcles t\u00f5sta. Selles artiklis tahan r\u00e4\u00e4kida oma projektist, mille m\u00f5tlesin v\u00e4lja, kui otsisin t\u00f6\u00f6tavat lahendust, antud juhul Docker'i pilti, mis v\u00f5imaldaks kiiresti \u00fcles t\u00f5sta OpenVPN serverit minimaalse seadistuse ja vastuv\u00f5etava turvalisusega.<\/p>\n

\"K\u00e4ivitame<\/a><\/noindex><\/p>\n

\n<\/a><\/noindex><\/p>\n

Eelalugu<\/h3>\n

V\u00f5ime teenust igasugustes seadmetes k\u00e4ivitada: olgu need f\u00fc\u00fcsilised serverid, virtuaalsed privaatserverid v\u00f5i isegi konteineriruum teise konteinerihalduss\u00fcsteemi sees \u2014 see oli kriitilise t\u00e4htsusega. Minu pilk suundus kohe Dockerile. Esiteks, see teenus on \u00fcha populaarsem ja seega pakuvad j\u00e4rjest rohkem teenusepakkujad eelnevalt installitud lahendusi; teiseks \u2014 on tsentraliseeritud piltide hoidla, kust saab alla laadida ja teenuse k\u00e4ivitada \u00fche k\u00e4suga terminalis. M\u00f5te, et selline projekt peaks juba eksisteerima, k\u00e4is mul peas ja ma otsisin innukalt. Kuid enamik projekte, mida ma leidsin, olid kas liiga mahukad (pidin looma konteineri p\u00fcsiva andmete salvestamise jaoks ja mitu korda k\u00e4ivitama konteineri rakendusega erinevate parameetritega), v\u00f5i polnud neil korralikku dokumentatsiooni, v\u00f5i olid nad hoopis mahaj\u00e4etud. Kuna ma ei leidnud midagi vastuv\u00f5etavat, alustin oma projekti kallal t\u00f6\u00f6tama. Ees ootasid unetuks \u00f6\u00f6d dokumentatsiooni uurimisel, koodi kirjutamisel ja t\u00f5rgete otsimisel, kuid l\u00f5puks n\u00e4gi minu teenus valguse ning kostis k\u00f5ikide monokroomsete LED-paneeli v\u00e4rvidega ruuteri peal. Nii et palun tervitada ja toetada \u2014 Docker-OpenVPN<\/a><\/noindex>. Olen isegi loonud logo (\u00fclespool, enne katet), aga \u00e4rge t\u00f5siselt v\u00f5tke, sest ma ei ole disainer (veel). Selle projekti elluviimisel seadsin esikohale juurutamise kiiruse, minimaalsete seadistuste ja vastuv\u00f5etava turvalisuse taseme. Katsede ja eksimiste kaudu leidsin nende kriteeriumide optimaalset tasakaalu, kuigi kohati tuli ohverdada juurutamise kiirus turvalisuse nimel, ning minimaalsete seadistuste saavutamise nimel tuli maksta portatiivsusega: praeguses konfiguratsioonis ei saa \u00fches serveris loodud konteinerit teisele \u00fcle kanda ja k\u00e4ivitada. N\u00e4iteks genereeritakse k\u00f5ik kliendi- ja serverisertifikaadid teenuse k\u00e4ivitamisel ja see v\u00f5tab aega umbes 2 sekundit. Siiski tuli Defi-Hellmani faili genereerimine viia v\u00e4lja ehitamise aega: see luuakse dokkeri pildi koostamise ajal ja v\u00f5ib kesta kuni 10 minutit. Ma sooviksin v\u00e4ga saada sarnase lahenduse turvaprotsessi \u00fclevaadet austatud kogukonnalt.<\/p>\n

K\u00e4ivita<\/h3>\n

Teenuse k\u00e4ivitamiseks on meil vaja m\u00f5ningaid asju:<\/p>\n

    \n
  1. Server: f\u00fc\u00fcsiline v\u00f5i virtuaalne. Teoreetiliselt saab k\u00e4ivitada ka docker-i-dockeris, kuid ma ei ole selle valiku ulatuslikku testimist teinud;<\/li>\n
  2. Tegelikult Docker. Paljud hostinguteenuse pakkujad pakuvad Dockeriga valmis lahendusi;<\/li>\n
  3. Avalik IP-aadress.<\/li>\n<\/ol>\n

    Kui k\u00f5ik andmed on kohal, siis j\u00e4\u00e4b meil ainult k\u00e4ivitada j\u00e4rgmine k\u00e4sk oma serveri konsoolis:<\/p>\n

    docker run --cap-add=NET_ADMIN \n-it -p 1194:1194\/udp -p 80:8080\/tcp \n-e HOST_ADDR=$(curl -s https:\/\/api.ipify.org) \nalekslitvinenk\/openvpn<\/code><\/pre>\n
    Hoolikas lugeja on v\u00f5inud m\u00e4rgata, et serveri IP-aadress m\u00e4\u00e4ratakse automaatselt kasutades ipify.org<\/i>. Kui see mingil p\u00f5hjusel ei toimi, saate aadressi k\u00e4sitsi sisestada. Kui k\u00f5ik eelnevad sammud on \u00f5igesti tehtud, peaksime n\u00e4gema konsoolis midagi sarnast:<\/p>\n
    Sun Jun  9 08:56:11 2019 Initialization Sequence Completed\nSun Jun  9 08:56:12 2019 Client.ovpn file has been generated\nSun Jun  9 08:56:12 2019 Config server started, download your client.ovpn config at http:\/\/example.com\/\nSun Jun  9 08:56:12 2019 NOTE: After you download you client config, http server will be shut down!<\/code><\/pre>\n
    Oleme eesm\u00e4rgile l\u00e4hedal: n\u00fc\u00fcd peame kopeerima example.com<\/a><\/noindex><\/i> (teie puhul on see teie serveri aadress) ja sisestage see brauseri aadressiriba. P\u00e4rast Enteri vajutamist laaditakse client.ovpn fail alla ja http server k\u00f5rvaldatakse. Kui see lahendus tekitab kahtlusi, siis v\u00f5ib kasutada j\u00e4rgmist trikki: k\u00e4ivitada eelmine k\u00e4sk ja lisada lipud. zp<\/i> ja parool. N\u00fc\u00fcd, kui sisestate genereeritud lingi brauseri aknasse, saate parooliga zip-arhiivi. Kui teil on kliendi konfigureerimisfail, v\u00f5ite kasutada \u00fcksk\u00f5ik millist sobivat klienti. Mina kasutan Tunnelblicki Maci jaoks.<\/p>\n
    Video\u00f5petus<\/h3>\n
    See video\u00f5petus sisaldab p\u00f5hjalikku juhendit teenuse seadistamiseks DigitalOceanis.
    \r\n        \"Vaata\r\n        
    <\/div>\r\n    <\/div><\/center>P.S.<\/b> Kui peate seda projekti kasulikuks, siis palun andke talle t\u00e4hti GitHubis, tehke fork ja r\u00e4\u00e4kige oma s\u00f5pradele. Kaast\u00f6\u00f6tajad ja turvaauditid on samuti teretulnud.P.P.S.<\/b> Kui see artikkel j\u00f5uab Habrisse, plaanin kirjutada j\u00e4rgmise teemal, kuidas k\u00e4ivitasin Dockerit-Dockeris ja Docker-Dockeris-Dockeris, miks ma seda tegin ja mis sealt v\u00e4lja tuli.
    \nEDIT1:<\/b> <\/p>\n
      \n
    1. Parandasin v\u00e4ljaandes vigu,<\/li>\n
    2. \u041e\u0442\u0432\u0435\u0447\u0430\u044f \u043d\u0430 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 \u0440\u0435\u0448\u0438\u043b \u0432\u044b\u043d\u0435\u0441\u0442\u0438 \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0441\u044e\u0434\u0430: \u0444\u043b\u0430\u0433 —privileged \u043d\u0443\u0436\u0435\u043d \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 iptables<\/li>\n<\/ol>\n
      \nEDIT2:<\/b> <\/p>\n
        \n
      1. \u0423\u043b\u0443\u0447\u0448\u0438\u043b \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u0440\u0430\u0437\u0430: \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u043d \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0444\u043b\u0430\u0433 —privileged<\/li>\n
      2. Lisatud link vene keeles video juhendile: youtu.be\/A8zvrHsT9A0<\/a><\/noindex><\/li>\n<\/ol>\n
        Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
        \u041f\u0440\u0438\u0432\u0435\u0442, \u0445\u0430\u0431\u0440\u043e\u0432\u0447\u0430\u043d\u0435! \u0421\u0442\u0430\u043b\u043a\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u043b\u0438 \u0432\u044b \u043a\u043e\u0433\u0434\u0430-\u043b\u0438\u0431\u043e \u0441 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439, \u043a\u043e\u0433\u0434\u0430 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u043f\u0435\u0440\u0435\u043d\u0435\u0441\u0442\u0438\u0441\u044c \u0432 \u0434\u0440\u0443\u0433\u043e\u0439 \u0433\u043e\u0440\u043e\u0434, \u0441\u0442\u0440\u0430\u043d\u0443 \u0438\u043b\u0438 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u043e\u043d\u0442\u0438\u043d\u0435\u043d\u0442? \u0423 \u043c\u0435\u043d\u044f \u0442\u0430\u043a\u0430\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0430\u0441\u0442\u043e, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0442\u044c \u0441\u0432\u043e\u0439 VPN \u0441\u0435\u0440\u0432\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0433\u0434\u0435 \u0443\u0433\u043e\u0434\u043d\u043e, \u0437\u0430 \u043f\u0430\u0440\u0443 \u0441\u0435\u043a\u0443\u043d\u0434, \u0441\u0442\u043e\u044f\u043b \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0441\u0442\u0440\u043e.\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u0441\u0432\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":53241,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-53240","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47K\u00e4ivitame OpenVPN Docker'is 2 sekundiga | ProHoster","description":"Tere, Habravate! Kas olete kunagi sattunud olukorda, kus soovite virtuaalselt teise linna, riiki v\u00f5i mandrile edasi liikuda? Mul on selline vajadus tekkinud piisavalt sageli, seet\u00f5ttu on v\u00f5imalus omada oma VPN-serverit, mida saab k\u00e4ivitada \u00fcksk\u00f5ik kus, paari sekundiga, olnud \u00fcsna oluline. Selles artiklis tahan r\u00e4\u00e4kida oma projektist, mida ma","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/zapuskaem-openvpn-v-dokere-za-2-sekundy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c OpenVPN \u0432 \u0414\u043e\u043a\u0435\u0440\u0435 \u0437\u0430 2 \u0441\u0435\u043a\u0443\u043d\u0434\u044b | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442, \u0445\u0430\u0431\u0440\u043e\u0432\u0447\u0430\u043d\u0435! \u0421\u0442\u0430\u043b\u043a\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u043b\u0438 \u0432\u044b \u043a\u043e\u0433\u0434\u0430-\u043b\u0438\u0431\u043e \u0441 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439, \u043a\u043e\u0433\u0434\u0430 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u043f\u0435\u0440\u0435\u043d\u0435\u0441\u0442\u0438\u0441\u044c \u0432 \u0434\u0440\u0443\u0433\u043e\u0439 \u0433\u043e\u0440\u043e\u0434, \u0441\u0442\u0440\u0430\u043d\u0443 \u0438\u043b\u0438 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u043e\u043d\u0442\u0438\u043d\u0435\u043d\u0442? \u0423 \u043c\u0435\u043d\u044f \u0442\u0430\u043a\u0430\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0430\u0441\u0442\u043e, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0442\u044c \u0441\u0432\u043e\u0439 VPN \u0441\u0435\u0440\u0432\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0433\u0434\u0435 \u0443\u0433\u043e\u0434\u043d\u043e, \u0437\u0430 \u043f\u0430\u0440\u0443 \u0441\u0435\u043a\u0443\u043d\u0434, \u0441\u0442\u043e\u044f\u043b \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0441\u0442\u0440\u043e.\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u0441\u0432\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/zapuskaem-openvpn-v-dokere-za-2-sekundy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-26T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53240","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 06:37:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:28:50","updated":"2026-01-24 06:37:21"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/53240","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=53240"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/53240\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/53241"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=53240"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=53240"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=53240"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}