Installing and configuring OpenVPN

Step 1: We will begin to install and configure our OpenVPN server. Begin by updating and upgrading your system packages with the following commands.

sudo apt update
sudo apt upgrade -y

Step 2: Now, configuring OpenVPN is a technical process and a lot of steps are required to be performed in order to configure it properly. Luckily, there is a script which makes this process easy for us. We will use this to script to install and configure our OpenVPN server. To download this script, execute the following command

wget https://raw.githubusercontent.com/angristan/openvpn-install/master/openvpn-install.sh

Step 3: To execute this script, we have to give it execution permission. To do that, execute the following command

sudo chmod +x openvpn-install.sh

Step 4: Now, Execute the script

sudo ./openvpn-install.sh

It will ask a bunch of questions. 

• The first prompt asks you to check the IP address of your Linux machine. Press enter if it is the correct one, if not, press any other key. 
• Next, it will ask if you want to enable IPv6 connectivity. You can leave it at default and press enter.
• Next, it will ask you which port you want to use. The default port is 1194. You can go with the default port or choose your own port. We need to open this port through our firewall, which we will do later.
• Next, it will ask you if you want to use TCP or UDP. Press enter to choose UDP.
   

• Next, It will ask you which DNS resolver you want to use. I’ll recommend you to choose Cloudflare (option 3). 
• Next, It will ask you if you want to use compression. The default option is no, go ahead and press enter.
• Next, it will ask you to customize encryption settings. Again, the default option is no, go ahead and press enter.

• Press enter at the next prompt to start the process of applying the settings and installing the required certificates.
• Next, Enter the name of the client which will connect to our VPN server.
• Next, it will ask if you want to use a password for the client. Enter 2 and enter your password.

Step 5: That’s it, the configuration is done. Now OpenVPN creates a file for every client(user) that you create. To add more client, revoke an existing client or uninstall OpenVPN, execute the script again and it will give you the option to do so.

Step 6: We need to open port 1194 for UDP connections. Some cloud service providers have their own Firewall, you need to open this port through your cloud portal. If you use UFW to manage your firewall, execute the following command.

sudo ufw allow 1194/udp

A VPN is a tool that acts as a middleman between you and the Internet that you browse. Whatever you do online, the VPN acts as a connecting bridge between your computer and the Internet. To the services that you are using, for example – visiting a website), to them, it appears as if your VPN is the client, but in reality, the VPN relays the information back to your computer, and in turn, hides your identity (IP address). A good VPN encrypts your connection, so whatever data goes between your computer and the VPN server is encrypted, and your ISP cannot read your internet traffic. There are a lot of VPN services that you can subscribe to, but using them means trusting them with your browsing data. So, what is the alternative? Well, you can go on to create your own VPN server, and doing so is not that tricky at all. You would require the following to create your own VPN server:

• A Linux virtual machine with at least 1GB RAM and 1vCPU.
• A VPN software like OpenVPN.

There is a lot of VPN software that let you host a VPN server on a Linux virtual machine, in this article, we will be focusing on one of them, which is OpenVPN.