{"id":89,"date":"2018-10-13T21:17:38","date_gmt":"2018-10-13T18:17:38","guid":{"rendered":"https:\/\/artem.services\/?p=89"},"modified":"2020-03-26T12:00:20","modified_gmt":"2020-03-26T09:00:20","slug":"openvpn-%d0%b2%d1%8b%d0%b1%d0%be%d1%80%d0%be%d1%87%d0%bd%d1%8b%d0%b9-%d1%82%d1%80%d0%b0%d1%84%d1%84%d0%b8%d0%ba-mail-ru-yandex-ru-vk-com-ok-ru-kaspersky-ru","status":"publish","type":"post","link":"https:\/\/artem.services\/?p=89","title":{"rendered":"OpenVPN &#8212; \u0412\u044b\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0444\u0438\u043a (mail.ru, yandex.ru, vk.com, ok.ru, kaspersky.ru)"},"content":{"rendered":"<p><img loading=\"lazy\" class=\"size-full wp-image-105 aligncenter\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2018\/10\/OpenVPN.png\" alt=\"\" width=\"884\" height=\"258\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2018\/10\/OpenVPN.png 884w, https:\/\/artem.services\/wp-content\/uploads\/2018\/10\/OpenVPN-300x88.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2018\/10\/OpenVPN-768x224.png 768w\" sizes=\"(max-width: 884px) 100vw, 884px\" \/><\/p>\n<h3>\u0426\u0435\u043b\u044c:<\/h3>\n<p>\u041f\u0443\u0441\u0442\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 VPN \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u043f\u043e\u0434 \u0437\u0430\u043f\u0440\u0435\u0442, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0438\u0434\u0442\u0438 &quot;\u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e&quot;. \u0422\u0430\u043a \u0436\u0435 \u0432\u0430\u0436\u043d\u043e \u0443\u0434\u043e\u0431\u0441\u0442\u0432\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0441\u0442\u044c, \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.<\/p>\n<p>\u0412\u0441\u0435 \u0448\u0430\u0433\u0438 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b \u043d\u0430 <strong>CentOS 7<\/strong>.<\/p>\n<p>\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 <strong>EPEL<\/strong>, \u0435\u0441\u043b\u0438 \u0435\u0433\u043e \u0435\u0449\u0435 \u043d\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043d\u0443\u0436\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nyum install epel-release -y\r\nyum install openvpn easy-rsa -y\r\n<\/pre>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nvim \/etc\/openvpn\/server.conf\r\n<\/pre>\n<p><!--more--><\/p>\n<p>\u0418 \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u043c \u0432 \u043d\u0435\u0433\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nlocal CHANGE_THIS_ON_YOUR_PUBLIC_IP\r\nport 1194\r\n\r\nproto udp\r\ndev-type tun\r\ndev tun\r\n\r\nca ca.crt\r\ncert server.crt\r\nkey server.key\r\n\r\ndh dh2048.pem\r\n\r\ntopology subnet\r\nserver 10.8.0.0 255.255.255.0\r\n\r\ntxqueuelen 250\r\nkeepalive 300 900\r\n\r\ncipher AES-128-CBC\r\nncp-ciphers AES-128-GCM\r\n\r\nuser nobody\r\ngroup nobody\r\n\r\nduplicate-cn\r\n\r\npersist-key\r\npersist-tun\r\n\r\nstatus openvpn-status.log\r\n\r\nclient-config-dir ccd\r\n<\/pre>\n<p>\u0414\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0432\u0435\u0441\u044c \u043d\u0430\u0448 \u0442\u0440\u0430\u0444\u0444\u0438\u043a \u0445\u043e\u0434\u0438\u043b \u0447\u0435\u0440\u0435\u0437 VPN, \u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0441\u0435\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nmkdir \/etc\/openvpn\/ccd\r\nvim \/etc\/openvpn\/ccd\/DEFAULT\r\n<\/pre>\n<p>\u0418 \u0441\u043a\u043e\u043f\u0438\u0440\u0443\u0435\u043c \u0432 \u043d\u0435\u0433\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\npush &quot;dhcp-option DNS 8.8.8.8&quot;\r\npush &quot;route 8.8.8.8&quot;\r\n\r\npush &quot;dhcp-option DNS 74.82.42.42&quot; # HE.net DNS\r\npush &quot;route 74.82.42.42&quot; # Route to HE.net DNS\r\n\r\n# Persist TUN\r\npush &quot;persist-tun&quot;\r\n\r\n# Routes\r\n\r\n# Yandex network\r\npush &quot;route 5.45.192.0 255.255.192.0&quot;\r\npush &quot;route 5.255.192.0 255.255.192.0&quot;\r\npush &quot;route 37.9.64.0 255.255.192.0&quot;\r\npush &quot;route 37.140.128.0 255.255.192.0&quot;\r\npush &quot;route 77.75.152.0 255.255.248.0&quot;\r\npush &quot;route 77.88.0.0 255.255.192.0&quot;\r\npush &quot;route 84.201.128.0 255.255.192.0&quot;\r\npush &quot;route 87.250.224.0 255.255.224.0&quot;\r\npush &quot;route 93.158.128.0 255.255.192.0&quot;\r\npush &quot;route 95.108.128.0 255.255.128.0&quot;\r\npush &quot;route 100.43.64.0 255.255.224.0&quot;\r\npush &quot;route 109.235.160.0 255.255.248.0&quot;\r\npush &quot;route 130.193.32.0 255.255.224.0&quot;\r\npush &quot;route 141.8.128.0 255.255.192.0&quot;\r\npush &quot;route 178.154.128.0 255.255.128.0&quot;\r\npush &quot;route 185.32.185.0 255.255.255.0&quot;\r\npush &quot;route 185.32.186.0 255.255.255.0&quot;\r\npush &quot;route 185.71.76.0 255.255.252.0&quot;\r\npush &quot;route 199.21.96.0 255.255.252.0&quot;\r\npush &quot;route 199.36.240.0 255.255.252.0&quot;\r\npush &quot;route 213.180.192.0 255.255.224.0&quot;\r\n\r\npush &quot;route-ipv6 2001:678:384::\/48&quot;\r\npush &quot;route-ipv6 2620:10f:d000::\/44&quot;\r\npush &quot;route-ipv6 2a02:6b8::\/32&quot;\r\npush &quot;route-ipv6 2a02:5180::\/32&quot;\r\n\r\n# Mail.ru network\r\npush &quot;route 5.61.16.0 255.255.248.0&quot;\r\npush &quot;route 5.61.232.0 255.255.248.0&quot;\r\npush &quot;route 79.137.157.0 255.255.255.0&quot;\r\npush &quot;route 79.137.183.0 255.255.255.0&quot;\r\npush &quot;route 94.100.176.0 255.255.240.0&quot;\r\npush &quot;route 95.163.32.0 255.255.224.0&quot;\r\npush &quot;route 95.163.248.0 255.255.248.0&quot;\r\npush &quot;route 128.140.168.0 255.255.248.0&quot;\r\npush &quot;route 178.22.88.0 255.255.248.0&quot;\r\npush &quot;route 178.237.16.0 255.255.240.0&quot;\r\npush &quot;route 185.5.136.0 255.255.252.0&quot;\r\npush &quot;route 185.16.148.0 255.255.252.0&quot;\r\npush &quot;route 185.16.244.0 255.255.252.0&quot;\r\npush &quot;route 188.93.56.0 255.255.248.0&quot;\r\npush &quot;route 194.186.63.0 255.255.255.0&quot;\r\npush &quot;route 195.211.20.0 255.255.252.0&quot;\r\npush &quot;route 195.211.128.0 255.255.252.0&quot;\r\npush &quot;route 195.218.168.0 255.255.255.0&quot;\r\npush &quot;route 208.87.92.0 255.255.252.0&quot;\r\npush &quot;route 217.20.144.0 255.255.240.0&quot;\r\npush &quot;route 217.69.128.0 255.255.240.0&quot;\r\n\r\npush &quot;route-ipv6 2a00:1148::\/32&quot;\r\npush &quot;route-ipv6 2a00:a300::\/32&quot;\r\npush &quot;route-ipv6 2a00:b4c0::\/32&quot;\r\n\r\n# VK.com network\r\npush &quot;route 87.240.128.0 255.255.192.0&quot;\r\npush &quot;route 93.186.224.0 255.255.240.0&quot;\r\npush &quot;route 95.142.192.0 255.255.240.0&quot;\r\npush &quot;route 95.213.0.0 255.255.192.0&quot;\r\npush &quot;route 185.29.130.0 255.255.255.0&quot;\r\npush &quot;route 185.32.248.0 255.255.252.0&quot;\r\n\r\npush &quot;route-ipv6 2a00:bdc0::\/36&quot;\r\npush &quot;route-ipv6 2a00:bdc0:e003::\/48&quot;\r\npush &quot;route-ipv6 2a00:bdc0:e004::\/46&quot;\r\npush &quot;route-ipv6 2a00:bdc0:e008::\/48&quot;\r\npush &quot;route-ipv6 2a00:bdc0:f000::\/36&quot;\r\n\r\n# Kaspersky network\r\npush &quot;route 77.74.176.0 255.255.248.0&quot;\r\npush &quot;route 91.103.64.0 255.255.248.0&quot;\r\npush &quot;route 93.159.224.0 255.255.248.0&quot;\r\npush &quot;route 185.54.220.0 255.255.254.0&quot;\r\npush &quot;route 185.85.12.0 255.255.255.0&quot;\r\npush &quot;route 185.85.14.0 255.255.254.0&quot;\r\n\r\npush &quot;route-ipv6 2a03:2480::\/33&quot;\r\n<\/pre>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0430\u043f\u043a\u0443 \u0434\u043b\u044f \u043a\u043b\u044e\u0447\u0435\u0439 \u0438 \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u043c \u043d\u0443\u0436\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u0445:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nmkdir -p \/etc\/openvpn\/easy-rsa\/keys\r\ncp -a \/usr\/share\/easy-rsa\/2.0\/* \/etc\/openvpn\/easy-rsa\r\n<\/pre>\n<p>\u0414\u043b\u044f \u0443\u0434\u043e\u0431\u0441\u0442\u0432\u0430 \u043c\u043e\u0436\u0435\u043c \u0441\u0440\u0430\u0437\u0443 \u0432 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043d\u0443\u0436\u043d\u0443\u044e \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0435\u0439, \u0434\u0430\u0431\u044b \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0435\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043d\u0435 \u0432\u0432\u043e\u0434\u0438\u0442\u044c:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nvim \/etc\/openvpn\/easy-rsa\/vars\r\n<\/pre>\n<p>\u0418 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043c \u0435\u0433\u043e \u043a \u0442\u0430\u043a\u043e\u043c\u0443 \u0432\u0438\u0434\u0443:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nexport KEY_COUNTRY=&quot;UA&quot;\r\nexport KEY_PROVINCE=&quot;UA&quot;\r\nexport KEY_CITY=&quot;Kiev&quot;\r\nexport KEY_ORG=&quot;openvpn&quot;\r\nexport KEY_EMAIL=&quot;admin@artem.services&quot;\r\nexport KEY_OU=&quot;VPN&quot;\r\nexport KEY_NAME=&quot;openvpn&quot;\r\nexport KEY_CN=&quot;openvpn.artem.services&quot;\r\n<\/pre>\n<p>\u041a\u043e\u043f\u0438\u0440\u0443\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e <strong>OpenSSL<\/strong>:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\ncp \/etc\/openvpn\/easy-rsa\/openssl-1.0.0.cnf \/etc\/openvpn\/easy-rsa\/openssl.cnf\r\n<\/pre>\n<p>\u041f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u0432 \u043f\u0430\u043f\u043a\u0443 \u0441\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0435\u0439, \u0438 \u043e\u0447\u0438\u0449\u0430\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0435\u0435 \u0434\u043b\u044f \u043d\u0430\u0448\u0438\u0445 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\ncd \/etc\/openvpn\/easy-rsa\r\nsource .\/vars\r\n.\/clean-all\r\n<\/pre>\n<p>\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\n.\/build-ca\r\n<\/pre>\n<p>\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u043a\u043b\u044e\u0447 \u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\n.\/build-key-server server\r\n<\/pre>\n<p>\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c <strong>Diffie-Hellman<\/strong> \u043a\u043b\u044e\u0447:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\n.\/build-dh\r\n<\/pre>\n<p>\u041f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0441 \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u044b \u0441\u043e\u0437\u0434\u0430\u043b\u0438:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\ncd \/etc\/openvpn\/easy-rsa\/keys\r\n<\/pre>\n<p>\u0418 \u0441\u043a\u043e\u043f\u0438\u0440\u0443\u0435\u043c \u043d\u0443\u0436\u043d\u044b\u0435 \u043d\u0430\u043c \u0444\u0430\u0439\u043b\u044b \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 <strong>OpenVPN<\/strong>&#39;a:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\ncp -a dh2048.pem ca.crt server.crt server.key \/etc\/openvpn\r\n<\/pre>\n<p>&nbsp;<\/p>\n<blockquote><p>\u0412\u0430\u0436\u043d\u043e \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443 \u044d\u0442\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0441\u044c \u043f\u0440\u0430\u0432\u0430<\/p><\/blockquote>\n<p>&nbsp;<\/p>\n<p>\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0438 \u043a\u043b\u044e\u0447 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\ncd \/etc\/openvpn\/easy-rsa\r\n.\/build-key client\r\n<\/pre>\n<p>\u0414\u0430\u043b\u044c\u0448\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0434\u043b\u044f <strong>iptables<\/strong>, \u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f <strong>firewalld<\/strong> \u0442\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0435\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nyum install iptables-services -y\r\nsystemctl mask firewalld\r\nsystemctl enable iptables\r\nsystemctl stop firewalld\r\nsystemctl start iptables\r\niptables --flush\r\n\r\n\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0432 iptables \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u043c:\r\n\r\n\r\niptables -t nat -A POSTROUTING -s 10.8.0.0\/24 -o eth0 -j MASQUERADE\r\niptables-save &gt; \/etc\/sysconfig\/iptables\r\n<\/pre>\n<p>&nbsp;<\/p>\n<blockquote><p>\u041e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430, \u0432 \u043c\u043e\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u044d\u0442\u043e eth0<\/p><\/blockquote>\n<p>\u0412 \u0444\u0430\u0439\u043b\u0435 \"<strong>\/etc\/sysctl.conf<\/strong>\" \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u0444\u043e\u0440\u0432\u0430\u0440\u0434\u0438\u043d\u0433 \u043f\u0430\u043a\u0435\u0442\u043e\u0432:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nnet.ipv4.ip_forward = 1\r\n<\/pre>\n<p>\u0418 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u043b\u0443\u0436\u0431\u0443 \u0441\u0435\u0442\u0438:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nsystemctl restart network.service\r\n<\/pre>\n<p>\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0441\u043b\u0443\u0436\u0431\u0443 <strong>OpenVPN<\/strong> \u0432 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u0443\u0441\u043a \u0438 \u0441\u0442\u0430\u0440\u0442\u0443\u0435\u043c \u0435\u0435:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nsystemctl -f enable openvpn@server.service\r\nsystemctl start openvpn@server.service\r\n<\/pre>\n<p>\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0441\u0440\u0430\u0437\u0443 \u0432\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0443\u0436\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nvim openvpn.ovpn\r\n<\/pre>\n<p>\u0418 \u0441\u043a\u043e\u043f\u0438\u0440\u0443\u0435\u043c \u0432 \u043d\u0435\u0433\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nclient\r\nremote artem.services 1194\r\n\r\nnobind\r\n\r\nremote-cert-tls server\r\n\r\ncipher AES-128-CBC\r\n\r\nsetenv opt ncp-ciphers AES-128-GCM\r\n\r\nsetenv opt block-outside-dns\r\n\r\ndev tun\r\n\r\nproto udp\r\n&lt;ca&gt;\r\n\u0421\u041e\u0414\u0415\u0420\u0416\u0418\u041c\u041e\u0415 \u0424\u0410\u0419\u041b\u0410 ca.crt\r\n&lt;\/ca&gt;\r\n\r\n&lt;cert&gt;\r\n\u0421\u041e\u0414\u0415\u0420\u0416\u0418\u041c\u041e\u0415 \u0424\u0410\u0419\u041b\u0410 client.crt\r\n&lt;\/cert&gt;\r\n\r\n&lt;key&gt;\r\n\u0421\u041e\u0414\u0415\u0420\u0416\u0418\u041c\u041e\u0415 \u0424\u0410\u0419\u041b\u0410 client.key\r\n&lt;\/key&gt;\r\n<\/pre>\n<p>\u0414\u0430\u043b\u044c\u0448\u0435 \u044d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u043c\u043e\u0436\u043d\u043e \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0426\u0435\u043b\u044c: \u041f\u0443\u0441\u0442\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 VPN \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u043f\u043e\u0434 \u0437\u0430\u043f\u0440\u0435\u0442, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0438\u0434\u0442\u0438 &quot;\u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e&quot;. \u0422\u0430\u043a \u0436\u0435 \u0432\u0430\u0436\u043d\u043e \u0443\u0434\u043e\u0431\u0441\u0442\u0432\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0441\u0442\u044c, \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c. \u0412\u0441\u0435 \u0448\u0430\u0433\u0438 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b \u043d\u0430 CentOS 7. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 EPEL, \u0435\u0441\u043b\u0438 \u0435\u0433\u043e \u0435\u0449\u0435 \u043d\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043d\u0443\u0436\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b: \u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438:<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[42],"tags":[5,12],"_links":{"self":[{"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/posts\/89"}],"collection":[{"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/artem.services\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=89"}],"version-history":[{"count":13,"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/posts\/89\/revisions"}],"predecessor-version":[{"id":1762,"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/posts\/89\/revisions\/1762"}],"wp:attachment":[{"href":"https:\/\/artem.services\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=89"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/artem.services\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=89"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/artem.services\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=89"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}