openvpn-install VS core

https://github.com/angristan/openvpn-install or if you want to be free from your distro's OpenSSL version: https://github.com/ix-ai/openvpn (recommended, just rebuild the container if it becomes outdated)

Buy your own cloud server and run https://github.com/angristan/openvpn-install to make it TCP over 443

Hey! I set up an OpenVPN Server on an Ubuntu Server VM inside ESXi 6.7 using this script: https://github.com/angristan/openvpn-install I need to access the local services running on the, e.g. 192.168.xxx.xxx, which works just fine. But I dont want all my network traffic being routed through the VPN Server. So if i reach out to 192.168.xxx.xxx I get the Service running on this IP in the local network where the server is in, but if I try to reach e.g. google.com the request does not get routed through the VPN. How can I achieve this? OpenVPN-Host: Ubuntu Server 22.04.3 LTS | OpenVPN 2.5.5 Connecting Client: EndeavourOS | OpenVPN 2.6.6

EDIT: I should add that the setup was done with angristan's OpenVPN installer. There's nothing particularly interesting about the conf files.

Very good, does it support https://github.com/angristan/openvpn-install ?

Pretty trivial actually. I set up my server on a VPS with https://github.com/angristan/openvpn-install, it generates the configs that I deployed to my devices, and when connected they can see each other. For resolving the domain name you'd need to set up the DNS during the wizard.

dnsmasq can be used for wildcard domain aliases in OPNsense firewall, https://github.com/opnsense/core/issues/4145#issuecomment-12...

Firmware's like Asuswrt-Merlin or OpenWRT can support dynamic-dns, or you can do like I do and run something like OPNsense in an x86 VM with a NIC passed through, or buy an inexpensive firewall appliance (up to 500mbps/1gbps/10gbps).

The easiest solution is to buy your own router, set it up, disable the router functionality on the Fritzbox 7590 and plug your router into it. It'll be cheaper and easier than a Cisco Firewall, but if you want to go the dedicated firewall route then I would recommenced OPNsense

Much searching lead me to a possible patch Unbound.inc for how it was handling aliases for 23.7 -> https://github.com/opnsense/core/pull/5925

[2]: https://github.com/opnsense/core/issues/2544

BSDs may not have a significant presence on desktops, but they're well known in the networking world for their reliability. They also were the foundation used to build OSes for specific applications. OpnSense and XigmaNAS, for example, are two excellent FreeBSD based applications aimed at firewalling/security and NAS/services.

https://opnsense.org/

https://xigmanas.com/xnaswp/