mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-25 22:36:04 +03:00
Code Issues Projects Releases Wiki Activity
1,091 Commits 1 Branch 0 Tags 20 MiB
160fbe70a8
Commit Graph

1091 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
hwdsl2
d1f15684be Update docs 
- Re-add DigitalOcean deploy button.
  Ref: carlfriess/DigitalOceanVPNSetup#11 617f981
 2022-02-26 00:48:31 -06:00
hwdsl2
8be670c4c8 Update templates 
- Update the AWS and Azure deployment template or script to use
  the VPN quick start script instead of vpnsetup.sh. The quick
  start script sets up IKEv2 automatically, so users don't need
  to manually set up IKEv2.
 2022-02-25 23:50:55 -06:00
hwdsl2
d37a2fb811 Improve quick start script 
- The VPN quick start script now supports most of the environment
  variables (such as VPN_DNS_SRV1) that are currently supported by
  vpnsetup.sh and ikev2.sh. This change enables customization by
  advanced users when running the quick start script.
 2022-02-25 23:41:49 -06:00
hwdsl2
f7c5ecf504 Update IKEv2 script 
- Create a client config README file under certain circumstances,
  such as when setting up IKEv2 automatically and users might not
  see the script's output.
 2022-02-25 23:25:34 -06:00
hwdsl2
32a55ec06a Update IKEv2 script 
- Make IKEv2 client address pool customizable using VPN_XAUTH_POOL,
  similar to vpnsetup.sh. This is for advanced users only.
 2022-02-25 21:17:09 -06:00
hwdsl2
79a344ec46 Cleanup 2022-02-24 09:18:39 -06:00
hwdsl2
3d6b685e0b Update docs 2022-02-23 00:13:29 -06:00
hwdsl2
a4e452e9df Cleanup 2022-02-23 00:08:45 -06:00
hwdsl2
06c5e27080 Fix for GCP MTU size 
- This fix is specifically for Google Cloud Platform (GCP) VMs.
  The default MTU size on GCP, 1460 bytes, could cause network issues
  such as "cannot open websites" with IKEv2 VPN clients.
  This issue was brought up multiple times in this repo, e.g. #1000.
- The fix changes the MTU to 1500 (the default that is widely used),
  and updates dhclient.conf so that it is not reverted to 1460 by DHCP.
- Refs: https://cloud.google.com/vpc/docs/vpc#mtu
        https://cloud.google.com/compute/docs/instances/detect-compute-engine
        https://linuxhint.com/how-to-change-mtu-size-in-linux/
        https://git.io/ikev2#cannot-open-websites-after-connecting-to-ikev2
 2022-02-23 00:07:33 -06:00
hwdsl2
4020e0d8e1 Update docs 2022-02-21 23:32:34 -06:00
hwdsl2
98537d02ac Update docs 
- Add a troubleshooting section for "Cannot open websites after
  connecting to IKEv2". Ref: #1000.
 2022-02-21 18:33:35 -06:00
hwdsl2
4035d086ce Update docs 2022-02-21 12:07:53 -06:00
hwdsl2
898496fc04 Update tests 2022-02-20 21:50:52 -06:00
hwdsl2
88c86c0191 Update IKEv2 script 
- Show the option to protect IKEv2 client config files only during
  IKEv2 setup, not when adding or exporting a client.
- Cleanup
 2022-02-20 21:45:11 -06:00
hwdsl2
55c91c7202 Update docs 2022-02-19 22:06:20 -06:00
hwdsl2
42c8d288e2 Cleanup 
- Improve backup of VPN config files
 2022-02-18 21:42:37 -06:00
hwdsl2
6ff28097db Update docs 2022-02-17 21:40:15 -06:00
hwdsl2
55aaeaf5f8 Update docs 2022-02-17 21:37:18 -06:00
hwdsl2
58e82552ae Update IKEv2 script 
- Minor improvements and cleanup
 2022-02-17 21:36:19 -06:00
hwdsl2
7361cec2db Update docs 2022-02-15 22:16:58 -06:00
hwdsl2
3d817c7fd4 Update IKEv2 script 
- Cleanup
 2022-02-15 21:17:47 -06:00
hwdsl2
4bc8fba344 Update IKEv2 script 
- Display a note if no password is required when importing client
  config files.
- Advanced users can now define VPN_PROTECT_CONFIG=yes when setting up
  IKEv2, if they want to protect client config files with a password.
 2022-02-15 21:15:08 -06:00
hwdsl2
a1dc396883 Update docs 2022-02-15 00:31:34 -06:00
hwdsl2
354c512d86 Update tests 2022-02-14 23:55:13 -06:00
hwdsl2
f072e8312a Update IKEv2 script 
- Cleanup
 2022-02-14 23:45:13 -06:00
hwdsl2
7c0d08442e Update IKEv2 script 
- Improve backward compatibility: Protect IKEv2 client config files
  using a password if one was previously generated.
- Ref: dbc3527
 2022-02-14 03:46:06 -06:00
hwdsl2
ddb6a65b82 Update docs 2022-02-14 00:37:18 -06:00
hwdsl2
444403ba10 Add IKEv2 change address helper script 
- New: IKEv2 change address helper script. This script can be used
  to change the IKEv2 VPN server's address.
 2022-02-13 23:41:35 -06:00
hwdsl2
34ece8bdc4 Update docs 2022-02-13 10:38:49 -06:00
hwdsl2
a168770482 Update docs 2022-02-12 23:20:31 -06:00
hwdsl2
f815d6810a Update IKEv2 script 
- Minor improvement for IKEv2 config passwords
 2022-02-12 16:16:46 -06:00
hwdsl2
c468f2cd15 Update docs 2022-02-12 15:30:22 -06:00
hwdsl2
ecddbc3eb5 Update docs 2022-02-12 12:27:37 -06:00
hwdsl2
26af7deefe Update tests 2022-02-12 12:27:26 -06:00
hwdsl2
5c85b5693c Cleanup 
- Change the default action to 'continue' in VPN scripts
 2022-02-12 12:24:26 -06:00
hwdsl2
fb85eae7ba Update IKEv2 script 
- Add an option to protect IKEv2 client config files using a password,
  which users can select when customizing IKEv2 or client options
  Ref: dbc3527
- Change the default action to 'continue' when confirming IKEv2 setup
  options
- Other minor improvements
 2022-02-12 12:12:51 -06:00
hwdsl2
8a9b83164a Update docs 2022-02-12 01:22:26 -06:00
hwdsl2
dbc3527448 Simplify IKEv2 import 
- Simplify IKEv2 configuration import: Remove passwords for IKEv2
  client config files. When importing, it is no longer required to
  enter a config file password.
- For macOS and iOS, .mobileconfig files require a password to work.
  The password is now included so there is no need to manually enter.
- Note: Client config files should be securely transferred from
  the VPN server to VPN client device(s) for import.
 2022-02-12 01:21:12 -06:00
hwdsl2
d20f82e6f2 Update IKEv2 script 
- Minor improvement to IKEv2 config password retrieval
 2022-02-11 21:50:00 -06:00
hwdsl2
7e809c2042 Update tests 2022-02-10 23:10:39 -06:00
hwdsl2
80af7a35f3 Update docs 2022-02-10 21:53:59 -06:00
hwdsl2
1da1493f53 Cleanup 2022-02-10 21:49:49 -06:00
hwdsl2
68b78879fd Update docs 2022-02-09 22:26:02 -06:00
hwdsl2
df37738677 Update docs 
- Add English translations for the "Google BBR" section, which was
  contributed by @optimusleobear in #1096
- Other minor improvements
 2022-02-09 22:18:12 -06:00
hwdsl2
6dbc47e0db Improve upgrade scripts 
- Stop IPsec service before updating Libreswan
 2022-02-08 23:46:11 -06:00
hwdsl2
86d4f2f93c Improve VPN setup 
- Retry certain 'apt-get' and 'yum' commands on failure
 2022-02-08 23:24:46 -06:00
hwdsl2
d01cc0b97a Update tests 2022-02-06 16:41:39 -06:00
hwdsl2
6f2cef64da Update tests 2022-02-06 11:42:55 -06:00
hwdsl2
3ca1bf63ee Update tests 2022-02-06 01:12:44 -06:00
hwdsl2
8d9eeee65e Update docs 
- Ref: #1097
 2022-02-04 21:55:50 -06:00