super VS openvpn-install

You can give us a try, https://github.com/spr-networks/super, http://supernetworks.org/. Wireguard is well integrated. We also have a tailscale plugin, and more vpn plugins on the way

Somewhat related -- with the project I work on, https://github.com/spr-networks/super, we do support wireguard peers (and also support combining that wireguard identity with a wifi peer identity as well).

Devices are provisioned by assigning or generating a wireguard keypair in the API.

Next the peers are routed together by policy and by default can't access one another. There's support for bidirectional network groups or one-way firewall rules with NAT.

One are of improvement is multicast support with wireguard, it's doable, just not ready yet.

golang-based SPR is open-source and can be run on RPi: https://github.com/spr-networks/super

> An unspoofable device identity is established with a MAC address and Per-Device Passphrase for WiFi (or a VPN Public Key for Remote Devices). From there, each device gets its own /30 subnet to exist on. Hardening and strict firewall rules block network spoofing and impersonation, and routing rules redefine connectivity between devices and to the internet.

The other thing we've been tasked to work on is load balancing across uplink interfaces, and we're happy for more feedback for how the feature should work. That's tracked under here https://github.com/spr-networks/super/issues/134. We will likely use the fwmark capabilities (which we already use for redirecting traffic to site-to-site vpn connections)

Yes -- except for limited wireguard support, usability for multicast is mostly solved. SPR services mDNS and Zeroconf/SSDP with a udp proxy[1].

[1] https://github.com/spr-networks/super/blob/main/multicast_ud...

https://github.com/angristan/openvpn-install or if you want to be free from your distro's OpenSSL version: https://github.com/ix-ai/openvpn (recommended, just rebuild the container if it becomes outdated)

Buy your own cloud server and run https://github.com/angristan/openvpn-install to make it TCP over 443

Hey! I set up an OpenVPN Server on an Ubuntu Server VM inside ESXi 6.7 using this script: https://github.com/angristan/openvpn-install I need to access the local services running on the, e.g. 192.168.xxx.xxx, which works just fine. But I dont want all my network traffic being routed through the VPN Server. So if i reach out to 192.168.xxx.xxx I get the Service running on this IP in the local network where the server is in, but if I try to reach e.g. google.com the request does not get routed through the VPN. How can I achieve this? OpenVPN-Host: Ubuntu Server 22.04.3 LTS | OpenVPN 2.5.5 Connecting Client: EndeavourOS | OpenVPN 2.6.6

EDIT: I should add that the setup was done with angristan's OpenVPN installer. There's nothing particularly interesting about the conf files.

Very good, does it support https://github.com/angristan/openvpn-install ?

Pretty trivial actually. I set up my server on a VPS with https://github.com/angristan/openvpn-install, it generates the configs that I deployed to my devices, and when connected they can see each other. For resolving the domain name you'd need to set up the DNS during the wizard.