Welcome to the VPN server documentation page. This site is intended for VPN server operators. It contains information on how to deploy the VPN software on a server, but also (technical) details on how to (better) integrate the software in existing infrastructure, and how configure the software for one’s own organization.

This is an (incomplete) list of features of the VPN software:

• OpenVPN server accepting connections on both UDP and TCP ports;
• Uses multiple OpenVPN processes for load sharing purposes;
• High Available deployments with multiple portals and nodes;
• Scales from a Raspberry Pi to many core systems with 10GBit networking;
• Full IPv6 support, using IPv6 inside the tunnel and connecting over IPv6;
• Support both NAT and Public IPs;
• Embedded CA for managing OpenVPN client certificates;
• Full support for WireGuard;
• Secure server and client configuration out of the box;
• User Portal to allow users to manage their VPN configurations on their devices and Admin Portal to manage users and connections;
• Internationalization / Localization support;
• Authentication to portals using Local User DB (default), LDAP, RADIUS, OIDC, SAML and Client Certificates;
• OAuth 2.0 API for integration with native eduVPN/Let’s Connect! applications;
• Deployment scenarios:
  • Full Tunnel to route all traffic over the VPN (for safer Internet usage on untrusted networks);
  • Split Tunnel to route only some traffic over the VPN (for access to the organization network);
  • Client-to-client (only) networking;
• Group Permissions support with SAML, LDAP authentication backends as well as “Static”;
• Ability to configure Logging;
• Support multiple deployment scenarios simultaneously;
• SELinux fully enabled (on Fedora, EL);
• Usage Statistics and Monitoring;
• Some Preview Features;