VPN provider support: Ovpn.com

[qdm12]

1. Download all files from https://www.ovpn.com/en/configurations
2. Set up code for supporting it, and use the hostname to extract location information dk.copenhagen.ovpn.com (countrycode.city.ovpn.com)
3. Configure updating mechanism to resolve existing hostnames only. This is limited and will not detect new servers added.
4. Message u/tamenqt

[Magic-Deceiver]

I will be waiting for this update patiently. Would love to see this become a reality! Had OVPN and am extremely satisfied. The only thing is I cannot get the OVPN wireguard to work with custom provider instruction no matter how I tweaked it. Either DNS could not resolve, or some other issues (may have something to do with multihop from OVPN).

Anyway! I really enjoy using gluetun! Thanks a lot!

[qdm12]

@Magic-Deceiver I'll try to get to it soon (can't promise though I'm flooded 😄). Feel free to create a Github discussion on this repo I can help you setup Wireguard if you want.

[Magic-Deceiver]

No problem! I truly appreciate your help! I Will create a discussion once I get my logs captured so its faster to see whats the problem :)

P.S.: That's gotta be the fastest response I have ever received on GitHub lol.

[qdm12]

For Wireguard, see discussion #677 where someone using ovpn managed to set it up 😉

[Magic-Deceiver]

Echo #677

1. Do each server config have the same interface address?
   As far as I know, the interface config remains the same

2. Do each server config have the same endpoint port?
   All peer endpoint ports are the same

3. Do they have IP addresses for their endpoint or only hostnames?
   They use the hostname in the form of [VPN server#].[prd].[servers city location].[ovpn.com]:[port]
   e.g. vpn71.prd.newyork.ovpn.com:9929
   e.g. vpn06.prd.malmo.ovpn.com:9929
   e.g. vpn72.prd.zurich.ovpn.com:9929
   prd remains the same for all

4. Is your interface private key the same for all server configs?
   If I download multiple configs using the same public key generated by OVPN, then all the interface private key remains the same

5. Do they have maybe an API to get all of their server information (such as IP address, Wireguard public key)?
   That I have no idea. The only option I have seen is to manual download

Hopefully, someone smarter than me will be able to figure out how to access their server info other than downloading it manually from the website.

I hope this helps!

[qdm12]

@Magic-Deceiver nice thanks!! It does definitely helps. Wireguard support will be nice given what you said. Another two questions:

1. Is the PublicKey field value the same for all servers? It should be different but who knows 😄
2. Since it seems all their configs are hidden behind a login wall (😢), can you please:
   1. Download all their configs for each server. If it's not an easy process to download all the configs at once, then feel free to give up too (I would 😄)
   2. Remove your PrivateKey value for all of them. You could do that e.g. with VSCode by opening the directory where all your files are, then press CTRL+SHIFT+H (replace in all files), then ALT+R (use regular expression), then type ^PrivateKey.+$ in the Search field and write PrivateKey = in the Replace field. Finally press CTRL+ALT+Enter to replace all.
   3. Zip the resulting files
   4. Send the zip file to me at quentin.mcgaw@gmail.com

[qdm12]

@Magic-Deceiver perfect I received your email. I now have both OpenVPN and Wireguard configuration files, perfect. I sent a message to ovpn.com's support to ask them where their API is and how to use it, if I can obtain some server information programmatically that would be better to automatically update server information. I'll get to it soon.

[qdm12]

From their support email (notes to my future self):

• HTTP API: https://www.ovpn.com/v2/api/client/entry which contains all sort of server information as well as IP addresses (preferred) and WG public keys
• Wireguard port for each server can be found from the API
• OpenVPN TCP is on port 443
• OpenVPN UDP is on port 1194 and 1195
• OpenVPN optional addons - just allow to use OPENVPN_CUSTOM_PORT with these values
  • Public IPv4 on port UDP 1196, 1197
  • Multihop on 1201 and 1202
  • More add-ons ports may come later
• All servers run Openvpn 2.5.x and support CHACHA20-POLY1305, AES-256-GCM, AES-256-CBC and AES-128-GCM
• Singapore servers, we use tls-crypt instead of tls-auth

With all this, it should be a top tier integration 💯 (at the top with Mullvad and Ivpn).

I'm re-working the entire configuration setup right now, it might take me a few days, and then this is next on my list. I'll comment here once I have something ready to test, thanks for your patience!

[Magic-Deceiver]

Can't wait! I'm glad I was able to facilitate the process.

So far, no complaints with OVPN - on par with Mullvad, if not better.

[Magic-Deceiver]

Also, are you planning on integrating their public DNS server when connecting to OVPN? I believe they have four in total (perhaps you will find them helpful):

IPv4 addresses:
46.227.67.134
192.165.9.158

IPv6 addresses:
2a07:a880:4601:10f0:cd45::1
2001:67c:750:1:cafe:cd45::1

[qdm12]

Since I have a rather long backlog of providers to add support for, I spent a good amount of time refactoring the code and writing guides on adding a VPN provider. You need a bit of programming experience but you could also learn as you go. The relevant pages are:

• the development page describes how to get setup step-by-step to make changes to Gluetun
• the add a provider page is a step-by-step guide on how to add VPN provider to Gluetun

I'll comment here again if I start implementing the provider to avoid any potential duplicate work, but it should not be anytime soon I think. Please also comment here if you decide to start working on it