ovpn-admin VS Netmaker

I've been using this myself for managing two different OpenVPN setups, https://github.com/flant/ovpn-admin it's fairly basic but it does the job and generates .ovpn files for the clients. I'm building it and running it with docker, one for each vpn network.

I use both Wireguard (primary) and OpenVPN(secondary) to access my homelab. I really like the ease of management of WGDashboard for Wireguard and so went looking for something similar for OpenVPN and ran into ovpn-admin which I am running on a docker container. It works well, but I am struggling with a major issue: enabling local LAN access.

Based on this idea I want to add pihole service in the docker-compose file. I added the service like so: yaml pihole: container_name: pihole image: pihole/pihole:latest depends_on: - "openvpn" # ports: # - "53:53/tcp" # - "53:53/udp" # - "67:67/udp" # - "8081:80/tcp" env_file: - ./pihole/.env environment: TZ: 'Europe/Athens' # Change that with your timezone WEBPASSWORD: 'askdlasjd32r2fweasfq' DNS1: 1.1.1.1 # CloudFlare ServerIP: 172.19.2.1 # https://github.com/Simonwep/openvpn-pihole/blob/master/docker-compose.yml volumes: - './pihole/etc-pihole/:/etc/pihole/' - './pihole/etc-dnsmasq.d/:/etc/dnsmasq.d/' cap_add: - NET_ADMIN networks: npm_backend: ipv4_address: 172.19.2.1 # from npm-backend network restart: unless-stopped

This March, we've introduced ovpn-admin — a simple web interface to manage OpenVPN users, their certificates & routes in Linux. It is Open Source with its backend written in Go and frontend based on Vue.js.

Not sure how this all will work with Mikotiks, though. Because the admin panel should have access to the certificates and run on Mikrotik, but the OpenVPN there is quite limited (the things you've mentioned)… If you're really into it, it would be great to see a relevant issue, so other people can support, we can discuss all details and don't forget about it :-)

Netmaker - Layer 3 peer-to-peer overlay network and private DNS. Similar to Tailscale, but with a self-hosted server/admin UI. Runs kernel WireGuard so very fast. Not FOSS, but the source code is available. Written in Go.

My plan is to set up an EC2 instance and host a VPN, considering options like Netmaker, OpenVPN, or Tailscale. The goal is to connect these devices to the VPN, enabling SSH access from any connected node. This method seems cost-effective(Considering I want to use 100s of devices and potentially 1000s) and straightforward, requiring a simple setup with a sudo apt command on the Raspberry Pi.

I'm wondering if there are any alternative approaches to achieve this. Is something like Netmaker or Tailscale feasible enough? If you have any suggestions, I'd greatly appreciate it.

https://github.com/gravitl/netmaker

Honorable mention:

SuperHighway84 - more of a Usenet-inspired darknet, but I love the concept + the author's personal website:

https://github.com/mrusme/superhighway84

Exciting news to share! Netmaker has officially embraced open source. This momentous decision was unveiled at the Open Source Summit in Europe when the pull request successfully merged, transitioning their server from the SSPL to the widely recognized Apache License 2.0.

While we've encountered some challenges and worked with vendors like Cisco to find solutions, I'm curious about recommendations for SD-WAN providers that are well-suited for SASE users. This includes not only Zscaler but also other options like Netmaker, Palo Alto, Cloudflare, Cisco, and Forcepoint.

Now, my main question is how I can link my DDNS host endpoint with my EC2 instances, allowing only my home network to access them. I've come across a variety of suggestions, such as Netmaker, OpenVPN, Tailscale etc. but I'm curious to hear your opinions on these solutions.

HN is somehow always timely. Currently, these folks expect me to sign a CLA for a one-byte change to their README: https://github.com/gravitl/netmaker/pull/2516