Awesome
KidVPN
The world's smallest VPN server and client (For SylixOS and Linux).
Configure File
- Configure file is a ini format:
| keywords | description |
|---|---|
| mode | KidVPN run mode, 'server' or 'client' |
| key_file | KidVPN AES Key file |
| iv_file | Cipher initial vector (Optional default use ECB) |
| vnd_id | Virtual network device ID (Only for SylixOS) |
| tap_name | Virtual network device name (Only for Linux) |
| mtu | 1280 ~ 1472 (Optional default: 1464) |
| local_ip | Local IP address (Only for Server) |
| server | Server IP address (Only for Client) |
| port | Local port (Optional default: 10088) |
| hole_punching | UDP Hole punching (Optional default: 0) |
* If too many client in one VPN net you can use UDP hole punching to reduce server forwarding pressure.
- Server configure like this:
[server_0]
mode=server
key_file=serv.key
iv_file=serv.iv
vnd_id=0
tap_name=tap0
mtu=1464
local_ip=192.168.0.1
port=10088
- Client configure like this:
[client_0]
mode=client
key_file=cli.key
iv_file=cli.iv
vnd_id=0
tap_name=tap0
mtu=1464
server=123.123.123.123
port=10088
* KidVPN daemon allow dynamic update of IV parameters using SIGUSR1 signal.*
For SylixOS
- Step 1: Add vnd interface parameter in /etc/ifparam.ini
[vnd-X]
# X is a number of vnd ID)
enable=1
# Enable(up) this interface
ipaddr=x.x.x.x
# Virtual network ip address
netmask=x.x.x.x
# Virtual network netmask
mac=xx:xx:xx:xx:xx:xx
# Virtual network MAC address, If not, the system will use random numbers
- Step 2: Use 'vnd' command add a virtual net device.
vnd add X
# X is a number of vnd ID
- Step 3: Use 'kidvpn' to create a VPN connect.
kidvpn x.ini sector password
# 'x.ini' is vpn config file, 'sector' is ini sector which we will use, 'password' is password
- Step 4: Use 'route' command add some route entry to system, make route rules.
For Linux
- Prepare for work:
sudo apt-get install openssl
# Install OpenSSL library
sudo apt-get install libssl-dev
# Install OpenSSL develop library
make
# Build kidvpn target
- Step 1: Add tap interface
sudo tunctl -t tapX -u root
# X is tap number
sudo ifconfig tapX up
# Enable tapX network
- Step 2: Use 'ifconfig' command set tapX address
ifconfig tapX inet x.x.x.x netmask x.x.x.x
- Step 3: Use 'kidvpn' to create a VPN connect.
sudo ./kidvpn x.ini sector password
# 'x.ini' is vpn config file, 'sector' is ini sector which we will use, 'password' is password
- Step 4: Use 'route' command add some route entry to system, make route rules.
Enjoy yourself ^_^