Chained VPN routing lab with Linux netns, veth, and iptables
I built a chained VPN lab to support multi-user traffic isolation using only raw Linux tools. Each user gets: - A WireGuard tunnel - A dedicated namespace (wg-$user) bridged via veth - NAT and routing table override - A second namespace (ovpn-$user) running OpenVPN - Final egress through tun1 The entire setup is controlled with bash scripts and PostgreSQL — no Docker, no containers, no Python, just raw netns, iptables, ip rule and shell. Built for GDPR-compliant VPN infra with real isolation per collaborator. Code and README:…
What it does
In the maker’s words, at launch
I built a chained VPN lab to support multi-user traffic isolation using only raw Linux tools. Each user gets: - A WireGuard tunnel - A dedicated namespace (wg-$user) bridged via veth - NAT and routing table override - A second namespace (ovpn-$user) running OpenVPN - Final egress through tun1 The entire setup is controlled with bash scripts and PostgreSQL — no Docker, no containers, no Python, just raw netns, iptables, ip rule and shell. Built for GDPR-compliant VPN infra with real isolation per collaborator. Code and README: https://github.com/darksunstealth/multi-vps-routing Would love feedback — this was one of the most complex and satisfying systems I’ve built in pure Linux.
Does the same job
all alternatives →
- DADsnet, a simple command to manage a centralised WireGuard VPN2020 · github.com · ▲69
- VPvpnns – Per-app VPN using Linux namespaces2016 · github.com · ▲40
- EPeth-private-net – Tooling to run a private Ethereum network locally2017 · github.com · ▲140
- FAFirezone, an open-source WireGuard-based alternative to OpenVPN AS2021 · github.com · ▲183
I created Firezone to make it easier to host and manage your own WireGuard VPN server. While working at Cisco as a security automation engineer I experienced a lot of unnecessary pain managing secure network-level access into our cloud VPCs. I tried OpenVPN Access Server but I personally feel that security software should be open source to be validated (and improved) by the community. I discovered WireGuard and quickly fell in love with it, but soon found managing the peer configs to be a bit tedious and error-prone. So I built some convenience functionality on top, added a simple Web UI,…
More dev tools this month
the category →
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 1d ago · opentrailpaper.com
Launched alongside, May 2025
the whole month →
- C9
Life & fun · 2025 · felixrieseberg.github.io
