How to Make a Raspberry Pi VPN Server, Hacker News

The Raspberry Pi has a ton of different uses. Since it’s small and energy-efficient, uses such as a network-attached storage (NAS) device,media server,game server,smart home hub, or any number of Internet of Things (IoT) projects run extremely well on the Raspberry Pi. Since the credit card-sized Raspberry Pi sports a tiny footprint and sips power, it’s ideal for an always-on device. And with superb internet connectivity, whether running on a wireless network or via a wired Ethernet port, the Pi is suitable forhandling network traffic. Learn how to build a Raspberry Pi VPN (virtual private network) server!

What is a VPN and Why Should You Use One?

<a href="https://www.electromaker.io/tutorial/blog/pi-hole-setup-guide-how-to-set-up-pi-hole-ad-blocker-raspberry-pi-and-more" rel="noopener noreferrer" target="_blank"></p> <p>Ok, so what is a VPN? It’s a virtual private network, a means of connecting to the internet with a secure, private connection. Rather than using your IP address, network traffic is routed through a gateway server, so you’ll have a public-facing IP address of another location. For instance, you might be located in New York City, but with your VPN, making it look as if you’re connecting in London, UK.</p> <p>Great, but why should you use a VPN? There are tons of motivations for using a VPN. With an increasing number of snooping ISPs (internet service providers), many users simply want the security of a VPN masking their web traffic. Since you can use VPN servers for different countries, a VPN offers a nifty means of unlocking geo-protected content. Perhaps you’re based out of the UK, but traveling to the United States, and still want to be able to stream the BBC. A VPN can help with that. On public, unprotected Wi-Fi, a VPN adds a layer of security by masking your IP address. Plus, many VPN options alow you to set up a home VPN server for connecting to your home network from anywhere, a useful feature for the likes of server management. (Note: we at Electromaker do not condone illicit activity, so please only use a VPN for<a href="https://www.electromaker.io/tutorial/blog/how-to-make-a-raspberry-pi-torrent-box" rel="noopener noreferrer" target="_blank">legal action</a>s).</p><script data-noptimize="" data-wpfc-render="false"> /* <![CDATA[ */ fpm_start( "true" ); /* ]]> */ </script> <h2></h2> <p><a href="https://www.electromaker.io/tutorial/blog/how-to-make-a-raspberry-pi-torrent-box" rel="noopener noreferrer" target="_blank">Why use a VPN:</a><a href="https://www.electromaker.io/tutorial/blog/pi-hole-setup-guide-how-to-set-up-pi-hole-ad-blocker-raspberry-pi-and-more" rel="noopener noreferrer" target="_blank">Mask your IP address</p> <li>Hide from snooping ISPs<iframe allowfullscreen="allowfullscreen" data-src="//www.youtube.com/embed/15VjDVCISj0" frameborder="0"> Extra security on public Wi-Fi<iframe allowfullscreen="allowfullscreen" data-src="//www.youtube.com/embed/15VjDVCISj0" frameborder="0"> <li>Unblock geo-restricted content</li> <li>Connect to your home network from anywhere</li> <h2>How to Build a Raspberry Pi Raspberry Pi VPN Server</p> <h2></h2> </h2> <p>A Raspberry Pi VPN server is pretty easy and cheap to build. You’ll need a Raspberry Pi board, compatible Linux operating system such as the Debian-based Raspbian, a VPN provider, power supply, microSD card for hosting your operating system (OS), and optional but recommended case. You’ll also require an active internet connection, peripherals including a keyboard and mouse, plus a display of some kind. While you can use your Raspberry Pi hooked up to a display such as a monitor, TV, or projector, you might prefer to SSH into your Raspberry Pi instead.</p> <h2></h2> <p><a href="https://www.electromaker.io/tutorial/blog/how-to-make-a-raspberry-pi-torrent-box" rel="noopener noreferrer" target="_blank">What you’ll need for a Raspberry Pi VPN server:</a><a href="https://www.electromaker.io/tutorial/blog/pi-hole-setup-guide-how-to-set-up-pi-hole-ad-blocker-raspberry-pi-and-more" rel="noopener noreferrer" target="_blank"></a><a href="https://www.electromaker.io/tutorial/blog/how-to-make-a-raspberry-pi-torrent-box" rel="noopener noreferrer" target="_blank"></a><a href="https://www.electromaker.io/tutorial/blog/how-to-make-a-raspberry-pi-torrent-box" rel="noopener noreferrer" target="_blank">Raspberry Pi board</a>(Raspberry Pi 4 recommended)</p> <ul> <li>Debian-based Linux distribution (distro) such as Raspbian</li> <li>VPN provider (ie IPVanish)</li> <li> <li>VPN software i.e. OpenVPN</li> <li> <li>Case</li> <li> <li>microSD card</li> <li> <li>Keyboard / mouse and / or host PC</li> <li> <li>Monitor / TV / projector for a display</li> <li> <li>Active internet connection</li> </ul> <p>Total cost:<a href="https://www.electromaker.io/tutorial/blog/how-to-make-a-raspberry-pi-torrent-box" rel="noopener noreferrer" target="_blank">$ 15 USD. You can get started creating a VPN server with a Raspberry Pi for as little as $ (****************************************************************. If you opt for a Raspberry Pi Zero or Zero W, that cost lowers even more. I recommend a Raspberry Pi 4, although virtually any Pi board should work.</p> <h2> <h3>Make a Raspberry Pi VPN Server Using PiVPN</h3> </h2> <p>Arguably the easiest methods for running a Raspberry Pi VPN server is with PiVPN, an OpenVPN configuration too. As a word of caution: running PiVPN runs a script downloaded from the internet, so you’ll want to trust the source. While I haven’t personally scoured their</p> <h3>GitHub</h3> <p></a>codebase, everything seems to check out and it works like a champ on my Raspberry Pi.</p> <h2></h2> <p>Begin by running an update:</p> <p><a href="https://github.com/pivpn/pivpn" rel="noopener noreferrer" target="_blank">sudo apt-get update && apt-get upgrade</a><a href="https://github.com/pivpn/pivpn" rel="noopener noreferrer" target="_blank"></p> <p>Next up, run the PiVPN installation script:</p> <p> curl -L https://install.pivpn.dev | bash</a><a href="https://github.com/pivpn/pivpn" rel="noopener noreferrer" target="_blank"></p> <p>If you prefer the unstable test branch, enter:</p> <p> curl -L https://test.pivpn.dev | TESTING=bash</a><a href="https://github.com/pivpn/pivpn" rel="noopener noreferrer" target="_blank"></p> <p>And that’s it! Sort of. The script launches a PiVPN automated installer. You’ll receive a message informing you that “This installer will transform your Raspberry Pi into an openvpn server!” Click</p> <p></a>Okand continue.

Next up, select a static IP address, then hit

Ok (*********************. Choose either wlan0 or eth0 for wireless or ethernet respectively. Highlight the option you wish to choose, press

spacebarto add an asterisk beside that choice, then hitOkwhen you’re ready.

Then, there’s a message asking if you’d like to use your current newtork settings as a static address. You can review your IP address. If you’re satisfied, pressYes) and continue.

PiVPN now confirms your IP address settings. Wait a bit, and you should now see a screen asking you to pick a local user to hold your OpenVPN configuration. ClickOk . Then, you should be able to select a user. On my Raspberry Pi, I had one option: Pi. Press the spacebar to select it and an asterisk will appear next to Pi. After that, hitOk .

You’ll be prompted to enable unattended-upgrades. SelectOkand continue. Next up you can either enable unattended-upgrades or not. Choose either yes or no . Once you’ve proceeded, apt-get will check for upgraded packages, as well as check if OpenVPN is installed. If it’s not installed, PiVPN proceeds to install it.

If PiVPN begins installing OpenVPN, you’ll see a notification about selecting an OpenVPN port. By default, that’s 1194 but you can change it. I left this unchanged. PressOk .

Confirm your OpenVPN port and hitYes. Select your preferred encryption strength: – bit (recommended,

****************************** – bit (test level), or (bit) paranoid level). I left this as the recommended 4096 – bit level. When you’re satisfied, hit (Ok

A screen lets you know that default values for fields used in a security certificate will be reviewed. SelectOk , and review the different fields including country, state, city, and more. You can change these, or leave them as-is. I left them unaltered and pressedOk . Again, confirm that these fields are correct and pickYes.

OpenVPN will now create your encryption keys, so clickOk

. Wait for your encryption to generate keys. Depending on your level of encryption, this might take a bit of time. Go grab a cup of coffee or a pint, walk your dog, or fire up your favorite video game while you wait. Upon completion, OpenVPN prompts you if you’ve got a public DNS entry you’d like to use versus a public IP address. Select your preferred option, and continue.

Should you opt for a DNS entry, PiVPN asks you to give your public DNS name. Then, pick a DNS provider such as Google and OpenDNS. Enter that and pressOk . Alternatively, selecting IP address lets you enter your IP address.

Installation is complete, and you can runpivpn addwhich will create ovpn profiles. You’ll be prompted to reboot your Raspberry Pi so selectYes.

After restarting, go ahead and update again:

sudo apt-get update && apt-get upgrade

Then, configure your VPN client:

pivpn add

You’ll need to select a name for your client and specify a password that will be used for connecting to this VPN. After you set up your first OpenVPN client, there’s an .ovpn file for the newly-created client, and you need this to log in on a client device.

Install OpenVPN on the Raspberry Pi

Alternatively, you may prefer to simply install OpenVPN for the Raspberry Pi on a Linux distro such as Raspbian, Debian, Ubuntu, Linux Mint, or another OS.

Begin by performing an update:

sudo apt-get update && apt-get upgrade

Next, install OpenVPN:

sudo apt-get install openvpn unzip (*****************************

Check that your time zone information is correctly configured:

sudo dpkg-reconfigure tzdata (******************************

Select any add-on services, choose your country, region, and protocol, either UDP or TCP.

Make sure you’re running with root privileges:

sudo -i****************</p> <p>And download the OpenVPN set up:</p> <p><a href="https://github.com/pivpn/pivpn" rel="noopener noreferrer" target="_blank">cd / tmp && wget https://files.ovpn.com/raspbian/ovpn- se-gothenburg.zip && unzip ovpn-se-gothenburg.zip && mkdir -p / etc / openvpn && mv config / * / etc / openvpn && chmod x / etc / openvpn / update-resolv-conf && rm -rf config && rm -f ovpn-se-gothenburg.zip</p> <p>Then, enter your login user name and password:</p> <p> echo “USERNAME”>>/ etc / openvpn / credentials<br />echo “PASSWORD”>>/ etc / openvpn / credentials</p> <p>Now, start OpenVPN with:</p> <p> sudo openvpn –config /etc/openvpn/ovpn.conf –daemon (******************************</p> <p>And check your connection using:</p> <p> curl https://www.ovpn.com/v2/api/client/ptr | python -m json.tool</a><a href="https://github.com/pivpn/pivpn" rel="noopener noreferrer" target="_blank"></p> <p>To check that OpenVPN is running on your Raspberry Pi, enter:</p> <p> ps aux | grep openvpn</a>

****************

Now, OpenVPN should be properly installed on your Raspberry Pi.

OpenVPN Clients and More

In order to connect to your Raspberry Pi VPN server, you’ll need to run client software. For macOS, Tunnleblick

is a solid choice. On Windows, you can use OpenVPN

. And forAndroid

or iOS) mobile devices, OpenVPN Connect is a great option. Once you’ve got a client installed, you need to copy the client configuration .ovpn file to your device. Then, you can connect to your Pi VPN server.

Run OpenVPN on your Raspberry Pi – Final Thoughts

An OpenVPN Raspberry Pi server works extremely well. Small, energy-efficient, and with a simple OpenVPN installation, the Pi is a fantastic always-on VPN server option.