Setting up a VPN tunnel on Linux allows you to securely route traffic through an encrypted connection. Below are common methods to create a VPN tunnel on Linux: OpenVPN is widely used and supports both TCP/UDP.

Installation

sudo apt install openvpn  # Debian/Ubuntu
sudo dnf install openvpn  # Fedora/CentOS

Configure OpenVPN

1. Download .ovpn config files from your VPN provider (e.g., NordVPN, ProtonVPN).
2. Place them in /etc/openvpn/:

   sudo cp your_config.ovpn /etc/openvpn/client.conf

3. Start the VPN:

   sudo systemctl start openvpn@client
   sudo systemctl enable openvpn@client  # Auto-start on boot

Verify Connection

curl ifconfig.me  # Check public IP
ip route show     # Check routing table

WireGuard (Fast & Modern)

WireGuard is lightweight and kernel-based for better performance.

Installation

sudo apt install wireguard  # Debian/Ubuntu
sudo dnf install wireguard-tools  # Fedora/CentOS

Configure WireGuard

1. Generate keys:

   umask 077
   wg genkey | tee privatekey | wg pubkey > publickey

2. Edit /etc/wireguard/wg0.conf:

   [Interface]
   PrivateKey = <your_private_key>
   Address = 10.0.0.2/24
   [Peer]
   PublicKey = <server_public_key>
   Endpoint = vpn.example.com:51820
   AllowedIPs = 0.0.0.0/0  # Route all traffic

3. Start WireGuard:

   sudo wg-quick up wg0
   sudo systemctl enable wg-quick@wg0  # Auto-start

Verify Connection

wg show  # Check WireGuard status
ping 10.0.0.1  # Test connectivity

IPsec (StrongSwan)

IPsec is common for enterprise VPNs (e.g., Cisco, AWS VPN).

Install StrongSwan

sudo apt install strongswan  # Debian/Ubuntu
sudo dnf install strongswan  # Fedora/CentOS

Configure IPsec

Edit /etc/ipsec.conf:

conn myvpn
    type=tunnel
    left=%defaultroute
    leftid=your_local_ip
    right=vpn.server.com
    rightid=@server
    auto=start
    authby=secret

Start the Tunnel

sudo ipsec start
sudo ipsec up myvpn

SSH Tunnel (Quick & Simple)

For temporary tunneling over SSH:

ssh -D 8080 -C -N user@vpn.server.com  # SOCKS proxy

Then configure your browser/app to use localhost:8080.

Troubleshooting Tips

• Check Logs:

  journalctl -u openvpn@client -f  # OpenVPN logs
  sudo wg show  # WireGuard status

• Kill Switch (Prevent Leaks):

  sudo iptables -A OUTPUT -o tun0 -j ACCEPT  # Allow VPN traffic
  sudo iptables -A OUTPUT -j DROP  # Block non-VPN traffic

• DNS Leak Protection: Use resolvectl (systemd) or manually set DNS in /etc/resolv.conf.

Which VPN Should You Use?

• OpenVPN: Best compatibility (SSL/TLS).
• WireGuard: Fastest, best for mobile/desktop.
• IPsec: Enterprise-grade, complex but secure.
• SSH Tunnel: Quick but slower.

Let me know if you need help with a specific setup! 🚀