How to Set Up a VPN on Your VPS

How to Set Up a VPN on Your VPS

A VPN (Virtual Private Network) enhances online privacy and security by encrypting your internet connection. Follow this step-by-step guide to set up a VPN on your VPS.

Step 1: Update Your VPS

• Log In to Your VPS via SSH:
  Use an SSH client like PuTTY or your terminal to access your VPS.

• Update the Package List:
  Run the following commands to update your VPS:

  sudo apt update && sudo apt upgrade -y
  

Step 2: Choose and Install VPN Software

• Popular Choices:
  OpenVPN and WireGuard are two widely used VPN solutions. For this guide, we’ll focus on OpenVPN.

• Install OpenVPN and Easy-RSA:

  sudo apt install openvpn easy-rsa -y
  

Step 3: Configure the OpenVPN Server

• Set Up the Easy-RSA Environment:

  • Create the Easy-RSA directory:

    make-cadir ~/openvpn-ca  
    cd ~/openvpn-ca  
    

  • Edit the variables file for customization:

    nano vars  
    

    Update values like KEY_COUNTRY, KEY_PROVINCE, etc., as per your details.

• Generate Server Certificates and Keys:
  Execute the following commands to build your certificate authority (CA):

  source vars  
  ./clean-all  
  ./build-ca  
  ./build-key-server server  
  ./build-dh  
  

• Copy Files to OpenVPN Directory:
  Move the generated keys and certificates to OpenVPN's configuration directory:

  sudo cp ~/openvpn-ca/keys/{server.crt,server.key,ca.crt,dh2048.pem} /etc/openvpn  
  

Step 4: Create OpenVPN Server Configuration

• Download a Sample Configuration File:

  sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz /etc/openvpn/  
  sudo gunzip /etc/openvpn/server.conf.gz  
  

• Edit the Configuration File:
  Open and modify the file to include your certificate and key paths:

  sudo nano /etc/openvpn/server.conf  
  

  Update lines like:

  ca ca.crt  
  cert server.crt  
  key server.key  
  dh dh2048.pem  
  

• Enable IP Forwarding:
  Edit the sysctl file:

  sudo nano /etc/sysctl.conf  
  

  Uncomment the following line:

  net.ipv4.ip_forward=1  
  

  Apply the changes:

  sudo sysctl -p  
  

Step 5: Start and Enable the VPN Service

• Start OpenVPN:

  sudo systemctl start openvpn@server  
  

• Enable OpenVPN to Start on Boot:

  sudo systemctl enable openvpn@server  
  

Step 6: Configure Client Devices

• Generate Client Certificates:

  • Create a client certificate and key:

    cd ~/openvpn-ca  
    source vars  
    ./build-key client1  
    

  • Copy the client files to your local machine securely.

• Set Up Client Configuration:
  Download a sample client configuration file and modify it with your server’s IP and certificates.

• Connect Using a VPN Client:
  Use a VPN client like OpenVPN Connect and import the configuration file to establish a secure connection.

Step 7: Test Your VPN

• Verify the Connection:
  Check the IP address to confirm you are routing traffic through the VPN:

  curl ifconfig.me  
  

• Troubleshoot Issues:
  If the VPN doesn’t work as expected, review the logs for errors:

  sudo journalctl -u openvpn@server  
  

Setting up a VPN on your VPS provides added security and privacy for your internet usage. If you encounter any issues, reach out to QuickServers support for assistance.