Home#

Welcome to the VPN server documentation page. This site is intended for VPN server operators. It contains information on how to deploy the VPN software on a server, but also (technical) details on how to (better) integrate the software in existing infrastructure, and how configure the software for one’s own organization.

End-User Support#

See End-User Support.

Features#

This is an (incomplete) list of features of the VPN software:

• Full support for WireGuard, including WireGuard over TCP;
• Full support for OpenVPN;
• High Available deployments with multiple portals and nodes;
• Scales from a Raspberry Pi to many systems with a bunch of CPU cores and 10GBit networking;
• Full IPv6 support, using IPv6 inside the tunnel and connecting over IPv6;
• Support both NAT and Public IPs;
• Secure server and client configuration out of the box;
• User Portal to allow users to manage their VPN configurations on their devices and Admin Portal to manage users and connections;
• Internationalization / Localization support;
• Authentication to portals using Local User DB (default), LDAP, RADIUS, OIDC, SAML and Client Certificates;
• OAuth 2.0 API for integration with native eduVPN/Let’s Connect! applications;
• Deployment scenarios:
  • Full Tunnel to route all traffic over the VPN;
  • Split Tunnel to route only some traffic over the VPN (for access to the organization network);
  • Client-to-client (only) networking;
• Full Permissions support, either through the authentication modules, or statically configured in the VPN server;
• Ability to configure Logging;
• Support multiple deployment scenarios simultaneously;
• SELinux fully enabled (on Fedora / Enterprise Linux);
• Usage Statistics and Monitoring;
• Some Preview Features;

Make sure to also check our Roadmap to see what we are planning to do in future releases.

Installation#

We support the following operating systems for deploying the VPN server:

• Debian
• Ubuntu
• Fedora
• Enterprise Linux
  • Red Hat Enterprise Linux
  • AlmaLinux
  • Rocky Linux

See Server OS Support for a list of supported OS versions.

We recommend you install your VPN server on the latest Debian stable release.

NOTE: we expect ALL software updates to be installed and the server rebooted before you install the VPN software!

NOTE: if you want to deploy on multiple machines for load balancing / high availability, please follow these instructions instead!

If you installed a VPN server and want to keep using it, please subscribe to the eduvpn-deploy mailing list. This list is used for announcements of updates and (community) discussion about running the VPN software.

Supported Versions#

We support a server release until such time the EOL date has been reached. We ONLY support the particular release on operating systems that are still supported by their vendor! We maintain a separate Server OS Support page that has information on the exact server OS support, including when we drop support for that particular OS (version).

If you are currently running the 2.x server, you can upgrade to version 3.x, or view the 3.x Release Notes.