How to ensure a docker container leaves the LAN via a VPN? Unicorn Meta Zoo #1: Why another podcast? Announcing the arrival of Valued Associate #679: Cesar Manara Come Celebrate our 10 Year Anniversary!OpenWRT + OpenVPN client forwarding from lan to vpn not workingOpenVPN: forward client's LAN to the VPNShorewall: VPN clients can access LAN resources, but not the InternetVPN gateway + redirect all lan clients over that gatewayDocker + VPN LAN to LANWith OpenVPN how can I only let LAN go through the VPN?Access to service in Docker container connected to VPNSSH to VPN server via the VPN connectionRouting and OpenVPN not running on the default gatewayRun openvpn inside docker and use as gateway for internet for other networked devices
Simulate round-robin tournament draw
How would you suggest I follow up with coworkers about our deadline that's today?
Stretch a Tikz tree
Like totally amazing interchangeable sister outfit accessory swapping or whatever
Can gravitational waves pass through a black hole?
"Working on a knee"
Was Objective-C really a hindrance to Apple software development?
Protagonist's race is hidden - should I reveal it?
Writing a T-SQL stored procedure to receive 4 numbers and insert them into a table
Why I cannot instantiate a class whose constructor is private in a friend class?
Is a self contained air-bullet cartridge feasible?
A journey... into the MIND
What is /etc/mtab in Linux?
Will I be more secure with my own router behind my ISP's router?
In search of the origins of term censor, I hit a dead end stuck with the greek term, to censor, λογοκρίνω
/bin/ls sorts differently than just ls
Will I lose my paid in full property
How do I deal with an erroneously large refund?
How to keep bees out of canned beverages?
What is the ongoing value of the Kanban board to the developers as opposed to management
Why does Java have support for time zone offsets with seconds precision?
All ASCII characters with a given bit count
What is a good proxy for government quality?
What *exactly* is electrical current, voltage, and resistance?
How to ensure a docker container leaves the LAN via a VPN?
Unicorn Meta Zoo #1: Why another podcast?
Announcing the arrival of Valued Associate #679: Cesar Manara
Come Celebrate our 10 Year Anniversary!OpenWRT + OpenVPN client forwarding from lan to vpn not workingOpenVPN: forward client's LAN to the VPNShorewall: VPN clients can access LAN resources, but not the InternetVPN gateway + redirect all lan clients over that gatewayDocker + VPN LAN to LANWith OpenVPN how can I only let LAN go through the VPN?Access to service in Docker container connected to VPNSSH to VPN server via the VPN connectionRouting and OpenVPN not running on the default gatewayRun openvpn inside docker and use as gateway for internet for other networked devices
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I have an application which needs to leave my LAN via a VPN. Today my setup is the following:
- a
systemd-nspawncontainer ... - ... in which I installed OpenVPN ...
- ... and the application
At my router I allow traffic from that container (its IP) only via one port: 1194, the OpenVPN port. Should OpenVPN not be up in the container, the traffic from that container will not leave my LAN (it could poke around in the LAN but that does not matter).
I am moving all my services to Docker with the idea of keeping strictly the containers provided by the vendors (for maintainability). This means that my application (which is dockerized) will leave in a container of its own.
How should I plan the networking to replicate my current setup? Specifically, how should the dokerized app interact with [probably a dockerized OpenVPN?].
I want to keep the router as the gatekeeper to make sure that anything which happens in the LAN will not allow that application to leave the network outside of a VPN tunnel.
networking vpn openvpn docker
asked Apr 17 at 11:35
WoJWoJ
1,46532647
add a comment |
I have an application which needs to leave my LAN via a VPN. Today my setup is the following:
- a
systemd-nspawncontainer ... - ... in which I installed OpenVPN ...
- ... and the application
At my router I allow traffic from that container (its IP) only via one port: 1194, the OpenVPN port. Should OpenVPN not be up in the container, the traffic from that container will not leave my LAN (it could poke around in the LAN but that does not matter).
I am moving all my services to Docker with the idea of keeping strictly the containers provided by the vendors (for maintainability). This means that my application (which is dockerized) will leave in a container of its own.
How should I plan the networking to replicate my current setup? Specifically, how should the dokerized app interact with [probably a dockerized OpenVPN?].
I want to keep the router as the gatekeeper to make sure that anything which happens in the LAN will not allow that application to leave the network outside of a VPN tunnel.
networking vpn openvpn docker
asked Apr 17 at 11:35
WoJWoJ
1,46532647
add a comment |
I have an application which needs to leave my LAN via a VPN. Today my setup is the following:
- a
systemd-nspawncontainer ... - ... in which I installed OpenVPN ...
- ... and the application
At my router I allow traffic from that container (its IP) only via one port: 1194, the OpenVPN port. Should OpenVPN not be up in the container, the traffic from that container will not leave my LAN (it could poke around in the LAN but that does not matter).
I am moving all my services to Docker with the idea of keeping strictly the containers provided by the vendors (for maintainability). This means that my application (which is dockerized) will leave in a container of its own.
How should I plan the networking to replicate my current setup? Specifically, how should the dokerized app interact with [probably a dockerized OpenVPN?].
I want to keep the router as the gatekeeper to make sure that anything which happens in the LAN will not allow that application to leave the network outside of a VPN tunnel.
networking vpn openvpn docker
asked Apr 17 at 11:35
WoJWoJ
1,46532647
I have an application which needs to leave my LAN via a VPN. Today my setup is the following:
- a
systemd-nspawncontainer ... - ... in which I installed OpenVPN ...
- ... and the application
At my router I allow traffic from that container (its IP) only via one port: 1194, the OpenVPN port. Should OpenVPN not be up in the container, the traffic from that container will not leave my LAN (it could poke around in the LAN but that does not matter).
I am moving all my services to Docker with the idea of keeping strictly the containers provided by the vendors (for maintainability). This means that my application (which is dockerized) will leave in a container of its own.
How should I plan the networking to replicate my current setup? Specifically, how should the dokerized app interact with [probably a dockerized OpenVPN?].
I want to keep the router as the gatekeeper to make sure that anything which happens in the LAN will not allow that application to leave the network outside of a VPN tunnel.
networking vpn openvpn docker
networking vpn openvpn docker
asked Apr 17 at 11:35
WoJWoJ
1,46532647
asked Apr 17 at 11:35
WoJWoJ
1,46532647
asked Apr 17 at 11:35
WoJWoJ
1,46532647
asked Apr 17 at 11:35
WoJWoJ
1,46532647
asked Apr 17 at 11:35
WoJWoJ
1,46532647
1,46532647
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963453%2fhow-to-ensure-a-docker-container-leaves-the-lan-via-a-vpn%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963453%2fhow-to-ensure-a-docker-container-leaves-the-lan-via-a-vpn%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
