OpenVPN-AIO-Client

An "all-in-one" docker for all your private browsing needs (including OpenVPN client with nftables kill switch ; Socks5 + HTTP proxy to both VPN and TOR (the…

  • Network Services
  • Security
  • Tools & Utilities
An "all-in-one" docker for all your private browsing needs (including OpenVPN client with nftables kill switch ; Socks5 + HTTP proxy to both VPN and TOR (the onion router) ; DNS server to DoT (DNS-over-TLS) services). NOTE: you must place your own OpenVPN configuration to the host path that is mapped to /etc/openvpn (The ovpn file must be named openvpn.ovpn. Credentials + certs can be in the same file or split out into multiple files - the flexibility is yours.) Set DNS_SERVERS to 127.2.2.2 to use DNS-over-TLS (use google and cloudflare services by default). Your DNS query out of the VPN exit will also be encrypted for even more security. Set it to other services IP's will use normal unencrypted services. Set HOST_NETWORK to your Unraid server network in CIDR format e.g. 192.168.1.0/24. For more detailed instructions, refer to the support thread

Platform availability

Available on 1 of 6 install platforms

  • Unraid
  • TrueNAS (not listed)
  • Umbrel (not listed)
  • ZimaOS (not listed)
  • Proxmox (not listed)
  • Helm (not listed)

Also on Docker Hub and GitHub

Health score

29/100 Low

Maintained
27last commit 456 days ago
Popular
2823 GitHub stars
Easy to install
351 install platform, install notes, Docker image
Light to run
No data

Based on 3 of 4 factors.

How is this calculated?

A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). Factors without data are left out and the rest are rescaled.

Availability: platform listings confirmed today

GitHub stars
23
Open issues
10
Last commit
2025-07-06
License
GPL-3.0
Activity
stale

Checked 7 days ago - source: GitHub (testdasi/openvpn-client-aio)

Resources & Compatibility

ARM (e.g. Raspberry Pi) is supported.

Checked 7 days ago - source: Docker Hub image tags and published docs

First-install notes

  • Set the server, IP, and key in the config In the OpenVPN config file, set remote to your VPN server address, ifconfig (the tunnel's local and remote IP addresses) to the values provided, and secret to the key file. Without these, the client does not know where to connect or how to identify the tunnel, so it will fail to start a secure connection. source
  • Use double backslashes in Windows paths On Windows, write file paths with double backslashes, like c:\\OpenVPN\\secret.key, in the config. Single backslashes can be misread, which can make OpenVPN fail to find the key file. source
  • Optional: check the server's fingerprint If using certificate security, you can set verify-hash to the server's fingerprint, shown as a long colon-separated code. Checking it helps confirm you are connecting to the expected server instead of a copycat. source

Fetched 7 days ago - each note links to its source

Alternatives (11)

  • CyberGhost VPN - VPN that encrypts internet traffic, bypasses geo-restrictions, and offers a user-friendly interface with no-logs policy and over 7,000 serv…
  • Hotspot Shield - Secure fast VPN to protect identity and hide location.
  • IVPN - IVPN is an audited, privacy focused VPN service that offers WireGuard, multi-hop
  • Mullvad VPN - Free the internet from data collection with Mullvad VPN – a service that helps keep your online activity, identity, and location private.
  • NordVPN - A minimal, shell-free, actively rebuilt container for the official NordVPN Linux client that gives self-hosted services a shared Virtual Pr…
  • Outline VPN - Journalists need safe access to information to research issues, communicate with sources, and report the news.
  • Private Internet Access - Encrypts online activity, provides anonymous IPs, has a strict no-logs policy, open-source VPN protocols, large server network, fast speeds…
  • Proton VPN - Swiss-based VPN that ensures online privacy with a high-speed network, advanced encryption, and no-logs policy, offering a free version.
  • Psiphon - Secure and high-performance, Psiphon provides open access to the uncensored internet for millions of people around the world, with 150,000,…
  • Shadowsocks - Shadowsocks is a self-hosted SOCKS5 proxy that uses the open-source Shadowsocks encryption protocol.
  • Windscribe - Windscribe VPN is your all-in-one solution for privacy, security, and unrestricted internet access.

Checked 4 days ago - source: AlternativeTo

Common questions

Where should the OpenVPN configuration file be placed in OpenVPN-AIO-Client?

Put your own OpenVPN configuration on a host path mapped to /etc/openvpn. The file must be named openvpn.ovpn, and credentials or certificates can be included in the same file or split into multiple files.

What DNS_SERVERS value enables DNS-over-TLS in OpenVPN-AIO-Client?

Set DNS_SERVERS to 127.2.2.2 to use DNS-over-TLS. Google and Cloudflare services are used by default, and other service IPs use normal unencrypted services.

How do I expose the home network through OpenVPN-AIO-Client?

Set HOST_NETWORK to your Unraid server network in CIDR format. For example, use 192.168.1.0/24.

Which proxy services does OpenVPN-AIO-Client provide?

The container provides Socks5 and HTTP proxies. Both are available to the VPN and to TOR.

Does OpenVPN-AIO-Client include a kill switch?

It includes an OpenVPN client with an nftables kill switch.

Answers sourced from github.com

Community

Collected yesterday - public community threads