This is the eduVPN/Let's Connect! documentation repository. This repository targets administrators and developers. It contains information on how to deploy the VPN software on a server, but also (technical) details about the implementation needed to (better) integrate it in existing infrastructure, and how to modify the software for one's own needs.
For more information see:
NOTE: if you are an end-user of eduVPN and want to contact someone, please try to find the contact information of your organization here. If you don't know where to go, then simply contact us at [email protected].
This is an (incomplete) list of features of the VPN software:
- OpenVPN server accepting connections on both UDP and TCP ports;
- Uses multiple OpenVPN processes for load sharing purposes;
- Scales from a Raspberry Pi to many core systems with 10GBit networking;
- Full IPv6 support, using IPv6 inside the tunnel and connecting over IPv6;
- Support both NAT and publically routable IP addresses;
- CA for managing client certificates;
- Secure server and client configuration out of the box;
- Portal to allow users to manage their configurations for their devices and admins to manage users, configurations and connections;
- Multi Language support;
- Authentication to portals using local user database (default), LDAP, RADIUS, SAML and Client Certificates;
- OAuth 2.0 API for integration with native eduVPN/Let's Connect! applications;
- Two-factor authentication TOTP support with user self-enrollment;
- Deployment scenarios:
- Route all traffic over the VPN (for safer Internet usage on untrusted networks);
- Route only some traffic over the VPN (for access to the organization network);
- Client-to-client (only) networking;
- Group ACL support with SAML and LDAP;
- Ability to disable all OpenVPN logging (default);
- Support multiple deployment scenarios simultaneously;
- SELinux fully enabled (on CentOS and Fedora);
- Guest Usage scenario for allow users of one server to use other designated servers (optional);
- Native applications available for most common platforms.
See Client Compatibility for more information about the supported OpenVPN clients.
NOTE: if you plan to install and run a eduVPN/Let's Connect! server please subscribe to the "deployers" mailing list here. It will be used for announcements of updates and discussion about running eduVPN/Let's Connect!.
You can also join IRC for technical questions/discussions/feedback on
Libera.Chat, channel #eduvpn. Please stick around for
a while to wait for a response!
You can also easily use the Web Chat if you can't be bothered to setup an IRC client. See you there!
- Basic eduVPN/Let's Connect! Server Installation
- Integrate your Active Directory via LDAP with eduVPN/Let's Connect!
- CentOS & Red Hat Enterprise Linux 7 (
x86_64) - Fedora 33, 34 (
x86_64) - Debian 9, 10, 11 (
x86_64)
Current Recommendation: install your VPN server on Debian 11.
Currently we do NOT support CentOS & Red Hat Enterprise Linux 8. We are waiting for this to be resolved. We avoid using third party PHP repositories to prevent having to support these repositories in the future.
NOTE: we expect ALL software updates to be installed and the server rebooted before you install the software!
NOTE: if you want to deploy on multiple machines for load balancing, please follow these instructions!
- Fedora 33, 34 (
aarch64) (Only available through the "development" repository)
You can use the Fedora aarch64 packages on e.g. the
Raspberry Pi.
We also have EXPERIMENTAL support for "EL8", i.e. CentOS 8, Rocky Linux 8 and Red Hat Enterprise Linux. See this mailinglist post.
If you want to set up your own server development environment see DEVELOPMENT_SETUP.
This work (this documentation repository) is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
See LICENSE.
The VPN server software is licensed under the AGPLv3+.
If you find a security problem in the code, the deployed service(s) and want to
report it responsibly, contact [email protected].
You can use PGP. My key is 0x9C5EDD645A571EB2. The full fingerprint is
6237 BAF1 418A 907D AA98 EAA7 9C5E DD64 5A57 1EB2.