Giter Site home page Giter Site logo

flexgw's Introduction

Flex GateWay

介绍

本程序提供了VPN、SNAT 基础服务。

主要提供以下几点功能:

  1. IPSec Site-to-Site 功能。可快速的帮助你将两个不同的VPC 私网以IPSec Site-to-Site 的方式连接起来。
  2. 拨号VPN 功能。可让你通过拨号方式,接入VPC 私网,进行日常维护管理。
  3. SNAT 功能。可方便的设置Source NAT,以让VPC 私网内的VM 通过Gateway VM 访问外网。

软件组成

Strongswan

OpenVPN

程序说明

ECS VPN(即本程序)

  • 目录:/usr/local/flexgw
  • 数据库文件:/usr/local/flexgw/instance/website.db
  • 日志文件:/usr/local/flexgw/logs/website.log
  • 启动脚本:/etc/init.d/flexgw 或/usr/local/flexgw/website_console
  • 实用脚本:/usr/local/flexgw/scripts

「数据库文件」保存了我们所有的VPN 配置,建议定期备份。如果数据库损坏,可通过「实用脚本」目录下的initdb.py 脚本对数据库进行初始化,初始化之后所有的配置将清空。

Strongswan

  • 目录:/etc/strongswan
  • 日志文件:/var/log/strongswan.charon.log
  • 启动脚本:/usr/sbin/strongswan

如果strongswan.conf 配置文件损坏,可使用备份文件/usr/local/flexgw/rc/strongswan.conf 进行覆盖恢复。

ipsec.conf 和ipsec.secrets 配置文件,由/usr/local/flexgw/website/vpn/sts/templates/sts 目录下的同名文件自动生成,请勿随便修改。

OpenVPN

  • 目录:/etc/openvpn
  • 日志文件:/etc/openvpn/openvpn.log
  • 状态文件:/etc/openvpn/openvpn-status.log
  • 启动脚本:/etc/init.d/openvpn

server.conf 配置文件,由/usr/local/flexgw/website/vpn/dial/templates/dial 目录下的同名文件自动生成,请勿随便修改。

flexgw's People

Contributors

r4ntix avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

flexgw's Issues

拨号VPN页面Internal Server Error

从后台日志中得到的错误信息是:
2018-01-10 17:48:32,734 INFO: [Request Message]: GET https://x.x.x.x/vpn/dial/
2018-01-10 17:48:32,761 ERROR: [Exception Request]: invalid literal for int() with base 10: 'Tue Jan 9 16:34:28 2018'
2018-01-10 17:48:32,762 ERROR: Exception on /vpn/dial/ [GET]
Traceback (most recent call last):
File "/usr/local/flexgw/python/lib/python2.7/site-packages/flask/app.py", line 1817, in wsgi_app
response = self.full_dispatch_request()
File "/usr/local/flexgw/python/lib/python2.7/site-packages/flask/app.py", line 1477, in full_dispatch_request
rv = self.handle_user_exception(e)
File "/usr/local/flexgw/python/lib/python2.7/site-packages/flask/app.py", line 1381, in handle_user_exception
reraise(exc_type, exc_value, tb)
File "/usr/local/flexgw/python/lib/python2.7/site-packages/flask/app.py", line 1475, in full_dispatch_request
rv = self.dispatch_request()
File "/usr/local/flexgw/python/lib/python2.7/site-packages/flask/app.py", line 1461, in dispatch_request
return self.view_functionsrule.endpoint
File "/usr/local/flexgw/python/lib/python2.7/site-packages/flask_login.py", line 758, in decorated_view
return func(*args, **kwargs)
File "/usr/local/flexgw/website/vpn/dial/views.py", line 34, in index
accounts = get_accounts(status=True)
File "/usr/local/flexgw/website/vpn/dial/services.py", line 253, in get_accounts
account['ct'] = datetime.fromtimestamp(int(status['ct'])).strftime('%Y-%m-%d %H:%M:%S')
ValueError: invalid literal for int() with base 10: 'Tue Jan 9 16:34:28 2018'

系统版本:CentOS 6

FlexGW如何配置MFA认证支持

FlexGW的OPENVPN能否配置MFA认证,类似支持google authentication,我参考网上的文章把 auth-user-pass-verify注释掉了,加上plugin /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so openvpn,但是客户端认证一直没法成功,是否有何特殊的配置?

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.