How to run Access Server on a VPS container

You can run Access Server on a virtual host within a VPS (Virtual Private Server) if particular constraints are satisfied.

Prepare your VPS host so that the following requirements are met:

* The VPS container hosting OpenVPN-AS uses veth network interfaces, as mentioned above.

1. Make the iptables state and nat modules accessible to containers.
Edit /etc/vz/vz.conf and add "ipt_state iptable_nat" to the end of the list of IPTABLES modules.

2. Allow the container to open the TUN/TAP interface.  These steps specifically affect container ID 101.

vzctl set 101 --devices c:10:200:rw --save
vzctl set 101 --capability net_admin:on --save

3. These kernel modules should be installed before the container is started:

modprobe ipt_mark
modprobe ipt_MARK

4. Now start the container:

vzctl start 101

5. Install AS normally in the container.  When ovpn-init runs, it might suggest that venet0 be the default interface.  This needs to be overridden to specify eth0 instead.