split dns/routing for personal vpn
-
Hi all
I'm looking into setting up an (always-on) vpn access to my home network. To that end I have a few questions.
- (1) Does UT support split routing based on the domain / "resolved IP"? Say the vpn is reachable at vpn.example.com, is it possible to resolve and send all requests for *.example.com through that vpn conenction, but nothing else?
- (2) What does "Use this VPN for" -> "its own network" in the vpn setup page do? Is that based on the IP range of the vpn network/gateway or on the domain?
- (3) I found this guide to potentially enable an always-on connection. is there a way to also enable a kill switch to block/timeout connections to *.example.com when the vpn is inactive?
- (4) If the above setup works, would that allow mutliple vpn connections to live side by side (assuming distinct ip ranges)?
Thanks in advance :waving_hand:
-
@gandalf Not sure about any answer to your questions, but I would suggest you research if what you want is possible on Ubuntu Desktop with NetworManager. If it is, then teh same setup should be transferable to Ubuntu Touch, as the VPN technology used is the same.
-
@arubislander said in split dns/routing for personal vpn:
@gandalf Not sure about any answer to your questions, but I would suggest you research if what you want is possible on Ubuntu Desktop with NetworManager. If it is, then teh same setup should be transferable to Ubuntu Touch, as the VPN technology used is the same.
Thanks for the suggestions. I've set up openvpn and the import in UT worked without troubles.
Split dns works quite well;
- the openvpn server needs to push the default domain (eg. mylan for any server.mylan to work).
- In the vpn settings on UT select "Use this VPN for: [ x ] Its own network
- it also works in combination with the wifi hotspot (FP4), I can access my server by its domain without any changes to the laptop network settings.
tbd: keep alive, auto-reconnect, and maybe a kill switch for the local domain
