[Openvpn-users] Re: Client-to-client only networks, no tun/tap on the server

[Charles Duffy <cduffy@xxxxxxxxxxx>]

Shish wrote:
> Is it possible to run the openvpn server purely as a meeting place for
> clients, without them being able to talk to the server per se? I wish
> to have several desktops talk to eachother, and that's all -- doing
> tun/tap stuff and bridging on the server side is a complication I'd
> rather not deal with.
>
> Seeing as all the openvpn daemon would be doing is reading from one
> regular socket and passing the message on to another, and the port
> isn't a privilaged one, would that make it possible to run
> client-to-client only servers entirely as a regular user? Or does the
> daemon *have* to be tied to a tun/tap device because, eg, it uses the
> kernel to take care of it's packet handling & routing for it?

Try this:

  dev null
  dev-type tun
  client-to-client

Note, though, that this isn't functionality that's tested often, and it 
might even be explicitly broken. You might do better to use a tap device 
that isn't bridged to anything, or a tun device with routing turned off, 
or a similar approach.


______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users