[{"_1":2,"_154":-5,"_155":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_133":134},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_85":-5,"_86":87,"_126":-5,"_127":11,"_128":17,"_129":11,"_130":-5,"_131":132},"canonicalUrl","https://hub.docker.com/r/jpillora/ipsec-vpn-server/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","jpillora","reponame","ipsec-vpn-server","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":-5,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":11,"_69":29,"_70":71,"_76":17,"_77":78,"_82":29,"_83":84},"categories",[],"content_types",[40],"image","date_registered","2016-06-01T12:37:47.28293Z","description","A simple, multi-user IPsec/L2TP and Cisco IPsec VPN server","is_private","last_updated","2016-07-14T08:27:15.29844Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",3723,"repository_type","star_count",4,"status",1,"status_description","active","source","collaborator_count",0,"full_description",":warning: This is a multi-user fork of https://github.com/hwdsl2/docker-ipsec-vpn-server\n\nMain difference is `VPN_USER` becomes `VPN_USERS`, see more below. If no `VPN_USERS` are provided, it will fallback to `VPN_USER`/`VPN_PASSWORD`.\n\n---\n\n# IPsec VPN Server on Docker\n\n[![Build Status](https://img.shields.io/travis/hwdsl2/docker-ipsec-vpn-server.svg)](https://travis-ci.org/hwdsl2/docker-ipsec-vpn-server)\n[![Docker Stars](https://img.shields.io/docker/stars/hwdsl2/ipsec-vpn-server.svg)](https://hub.docker.com/r/hwdsl2/ipsec-vpn-server)\n[![Docker Pulls](https://img.shields.io/docker/pulls/hwdsl2/ipsec-vpn-server.svg)](https://hub.docker.com/r/hwdsl2/ipsec-vpn-server)\n\nDocker image to run an IPsec VPN server, with support for both `IPsec/L2TP` and `IPsec/XAuth (\"Cisco IPsec\")`.\n\nBased on Debian Jessie with [Libreswan](https://libreswan.org) (IPsec VPN software) and [xl2tpd](https://github.com/xelerance/xl2tpd) (L2TP daemon). Available on [Docker Hub](https://hub.docker.com/r/hwdsl2/ipsec-vpn-server).\n\n## Install Docker\n\nFollow [these instructions](https://docs.docker.com/engine/installation/) to get Docker running on your server.\n\n## Download the image\n\nGet the trusted build from the Docker Hub registry:\n\n```\ndocker pull jpillora/ipsec-vpn-server\n```\n\nor download and compile the source yourself from GitHub:\n\n```\ngit clone https://github.com/hwdsl2/docker-ipsec-vpn-server.git\ncd docker-ipsec-vpn-server\ndocker build -t jpillora/ipsec-vpn-server .\n```\n\n## How to use this image\n\n### Environment variables\n\nThis Docker image uses the following three environment variables, that can be declared in an `env` file:\n\n```\nVPN_IPSEC_PSK=\nVPN_USERS=,,,...\n```\n\nWhere `` is ``. If `PASSWORD` is omitted, it will be randomly generated.\n\nThis will create a single user account for VPN login. The IPsec PSK (pre-shared key) is specified by the `VPN_IPSEC_PSK` environment variable.\n\n**Note:** In your `env` file, DO NOT put single or double quotes around values, or add space around `=`. Also, DO NOT use these characters within values: `\\ \" '`\n\nAll the variables to this image are optional, which means you don't have to type in any environment variable, and you can have an IPsec VPN server out of the box! Read the sections below for details.\n\n### Start the IPsec VPN server\n\nFirst, run this command on the Docker host to load the IPsec `NETKEY` kernel module:\n\n```\nsudo modprobe af_key\n```\n\nStart a new Docker container with the following command (replace `./vpn.env` with your own `env` file) :\n\n```\ndocker run \\\n --name ipsec-vpn-server \\\n --env-file ./vpn.env \\\n -p 500:500/udp \\\n -p 4500:4500/udp \\\n -v /lib/modules:/lib/modules:ro \\\n -d --privileged \\\n jpillora/ipsec-vpn-server\n```\n\n### Retrieve VPN login details\n\nIf you did not set environment variables via an `env` file, `VPN_USERS` will default to `vpnuser` and both `VPN_IPSEC_PSK` will be randomly generated. To retrieve them, show the logs of the running container:\n\n```\ndocker logs ipsec-vpn-server\n```\n\nSearch for these lines in the output:\n\n```console\nConnect to your new VPN with these details:\n\nServer IP: \nIPsec PSK: \nUsername: \nPassword: \n```\n\n### Check server status\n\nTo check the status of your IPsec VPN server, you can pass `ipsec status` to your container like this:\n\n```\ndocker exec -it ipsec-vpn-server ipsec status\n```\n\n## Next Steps\n\nGet your computer or device to use the VPN. Please refer to:\n\n[Configure IPsec/L2TP VPN Clients](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md) \n[Configure IPsec/XAuth VPN Clients](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-xauth.md)\n\nEnjoy your very own VPN! :sparkles::tada::rocket::sparkles:\n\n## Technical Details\n\nThere are two services running: `Libreswan (pluto)` for the IPsec VPN, and `xl2tpd` for L2TP support.\n\nClients are configured to use [Google Public DNS](https://developers.google.com/speed/public-dns/) when the VPN connection is active.\n\nThe default IPsec configuration supports:\n\n* IKEv1 with PSK and XAuth (\"Cisco IPsec\")\n* IPsec/L2TP with PSK\n\nThe ports that are exposed for this container to work are:\n\n* 4500/udp and 500/udp for IPsec\n\n## See Also\n\n* [IPsec VPN Server on Ubuntu, Debian and CentOS](https://github.com/hwdsl2/setup-ipsec-vpn)\n* [IKEv2 VPN Server on Docker](https://github.com/gaomd/docker-ikev2-vpn-server)\n\n## Author\n\n##### Lin Song \n- Final year U.S. PhD candidate, majoring in Electrical and Computer Engineering (ECE)\n- Actively seeking opportunities in areas such as Software or Systems Engineering\n- Contact me on LinkedIn: https://www.linkedin.com/in/linsongui\n\n## License\n\nCopyright (C) 2016 Lin Song $\"View$ \nBased on [the work of Thomas Sarlandie](https://github.com/sarfata/voodooprivacy) (Copyright 2012)\n\nThis work is licensed under the [Creative Commons Attribution-ShareAlike 3.0 Unported License](http://creativecommons.org/licenses/by-sa/3.0/) \nAttribution required: please include my name in any derivative and let me know how you have improved it!\n","has_starred","hub_user","immutable_tags_settings",{"_72":11,"_73":74},"enabled","rules",[75],".*","is_automated","permissions",{"_79":17,"_80":11,"_81":11},"read","write","admin","user","storage_size",541313535,"orgData","recentTags",[88],{"_89":40,"_90":91,"_92":93,"_94":95,"_96":97,"_46":115,"_116":91,"_117":29,"_118":52,"_53":119,"_120":121,"_122":106,"_123":115,"_124":62,"_125":17},"content_type","creator",265328,"full_size",139060177,"id",3246499,"images",[98],{"_99":100,"_101":102,"_103":104,"_105":106,"_107":108,"_109":110,"_111":104,"_112":-5,"_113":93,"_59":62,"_114":-5},"architecture","amd64","digest","sha256:6531e39cf248e1362c0a54532dc54b262f96b48a56e2e86a051cca652ad4c0f8","features","","last_pulled","2026-09-18T20:11:44.253725303Z","last_pushed","2016-07-14T08:27:15Z","os","linux","os_features","os_version","size","variant","2016-07-14T08:27:14.928392Z","last_updater","last_updater_username","media_type","latest","repository",719604,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":135,"_142":143,"_131":152,"_153":11},{"_36":136,"_38":137,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":138,"_53":31,"_28":29,"_54":55,"_56":-5,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":11,"_69":29,"_70":139,"_76":17,"_77":141,"_82":29,"_83":84},[],[40],[52],{"_72":11,"_73":140},[75],{"_79":17,"_80":11,"_81":11},"tags",{"_144":60,"_145":-5,"_146":-5,"_147":148},"count","next","previous","results",[149],{"_89":40,"_90":91,"_92":93,"_94":95,"_96":150,"_46":115,"_116":91,"_117":29,"_118":52,"_53":119,"_120":121,"_122":106,"_123":115,"_124":62,"_125":17},[151],{"_99":100,"_101":102,"_103":104,"_105":106,"_107":108,"_109":110,"_111":104,"_112":-5,"_113":93,"_59":62,"_114":-5},[],"canDeleteTags","actionData","errors"]

jpillora/ipsec-vpn-server

Tags for jpillora/ipsec-vpn-server