How VPN Works
Virtual private networks are a way of creating "virtual networks." This allows you to use an existing network connection to establish a new network connection. Networks need not be encrypted, but a virtual private network without encryption does not give you any extra security.
VPNs become useful when you add an encryption layer on top. This enables two nodes to establish a virtual network and communicate using an end-to-end encrypted link. All communication between these two nodes is encrypted. If one node can reach the other, and if the client trusts the certificate provided by the server, the encrypted connection is established and the virtual network is built over that encrypted link. Now, anyone on the local network who would have been able to monitor your traffic will now only see encrypted packets passing between the client and the VPN server.
OpenVPN/ClientServer - notes on setting up OpenVPN to operate on a client-server VPN architecture. Covers both the clients and the server.
Single Client: Static Key VPN Setup
Detailed instructions for setting up a static key virtual private network (VPN), the simplest arrangement for a single-client VPN:
Forcing Traffic Thru OpenVPN on Router
redirect-gateway option in OpenVPN to redirect all network traffic through the OpenVPN tunnel. This sets the OpenVPN server as the "redirected" gateway.
- Install a router between you and your ISP, to encrypt all of your traffic and route it through OpenVPN: https://jamielinux.com/blog/force-all-network-traffic-through-openvpn-using-iptables/
- Selective routing using DDWRT and OpenVPN: https://charleswilkinson.co.uk/2016/05/14/selective-routing-using-ddwrt-and-openvpn/
- Linode guide to routing traffic through an OpenVPN server: https://www.linode.com/docs/networking/vpn/tunnel-your-internet-traffic-through-an-openvpn-server
OpenVPNa tool for creating and connecting to virtual private networks.
Creating a Static Key VPN: OpenVPN/Static Key
Configuring Your DNS: DNS
Flags · Template:OpenVPNFlag · e