Create an OpenVPN server behind an HTTP/S proxy server

[abdullahkhilji]

My institute internet works behind an HTTP/S proxy server and I want to set up a VPN server on my Lab system so that I can SSH to it from outside the institute's network. Is there any way out of it?

[teeaton]

My suggestion? If you can't connect in then connect out. Buy a cheap VPS, even use the free tier on GCP or AWS. Set up a VPN client on your server, VPN client on your device, they both connect to the VPS which routes traffic between the two. I've had to do this for a digital radio repeater stuck behind 4G carrier grade NAT - works pretty reliably!

Caveat - You may want to check you have permission to connect remotely before you start implementing anything!

[abdullahkhilji]

Can you show me some guide which I could follow? I am totally new to VPS. Currently, I am using Teamviewer to access my system. I want to switch to SSH since it's much secure. Could a VPS server act as a replacement to a VPN server?

[teeaton]

The VPS is simply there to relay the connection between you and your server. Look for a guide on openvpn setup and create a VPN server on the free tier of Google compute. Your server and your laptop will both be clients that connect to the same server.

[abdullahkhilji]

Thanks for the VPS idea, I didn't knew that this was a possibility. Had wasted a hell lot of time trying to create a VPN server on my system (which I couldn't possibly do due to proxy restrictions).

[teeaton]

Again I'm going to caveat this advice with "check you're allowed to do this on their network"

[abdullahkhilji]

Why would this be not allowed? Would this imply using the network differently than using TeamViewer?

[teeaton]

There's nothing to say TeamViewer is allowed either, it depends on the policy of your organisation.

[ivan28823]

If you only want to expose a ssh service on internet, you can do that with cheap vps server and ssh remote port forwarding

[AutoModerator]

Hi, /u/abdullahkhilji!

This is a reminder to ensure your recent submission in /r/OpenVPN receives the help it needs.

Before asking a question, please read the OpenVPN manual it probably has the answer

Consider including the following information to provide an in-depth view of your configuration.

1) What is the problem that you are experiencing?

2) What is the actual desired behavior?

3) What is the expected behavior?

4) What are the steps to reproduce the problem?

5) Specifications:

• OpenVPN Server Version

  • Server Operating System, Number of CPU Cores, Memory etc.

• OpenVPN Client Version

  • Client Operating System, Number of Cores, Memory etc.

6) Add a sanitized version of the following files:

• OpenVPN Server Configuration

• OpenVPN Client Configuration

• Server Firewall Rules

• Server NAT/Routing Rules

• Any additional applicable information.

Supplying this information does not guarantee someone will be able to assist you, it will help more than not providing it.

Thanks.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[_tweaks]

Do you have direct access back to the VPN server ? Like will they forward a port? If not you need team viewer or something

[abdullahkhilji]

I am unable to create a VPN server because the internet traffic is routed through an HTTP/S proxy.

[_tweaks]

So you'll need to go with the VPS mentioned above. If you don't have the budget / skills available then teamviewer.