ocserv-docker's Introduction

ocserv-docker

You can use this repository to deploy ocserv and use it inside Iran.

Deploy

Install Docker 1.0+
cd ~;git clone https://github.com/satrobit/ocserv-docker.git

Run:

docker run -d --privileged --name ocserv-docker -v ~/ocserv-docker/ocserv:/etc/ocserv -p 443:443/tcp wppurking/ocserv

If you don't want to route the traffic inside Iran then:

docker run -d --privileged --name ocserv-docker -v ~/ocserv-docker/ocserv_iran:/etc/ocserv -p 443:443/tcp wppurking/ocserv

Be aware that the subnets in the ocserv.conf file are result of merging CIDRs and to increase performance it may contain IPs from other CIDRs so don't use this for anything important!

To make sure you're not leaking any information inside Iran use the default ocserv.conf

Usage

Use the default users to connect. (wyatt:616 holly:525)
If iptables is enabled make sure both tcp and udp are open to the public on port 443.
Download a client. Windows and macOS, Android, iOS

Users

Add a new user:

$> docker exec -it $(docker ps -a | grep vpn_run | awk '{print $1}') ocpasswd yourname
$> Enter password:
$> Re-enter password:

Removing default users:

Open ./ocserv/ocpasswd and remove the lines containing default usernames.

To-Do

Translate README.md
Add excluded Iranian IPs to ocserv.conf

Information

Box Size: 164 MB (originally 380+ MB)
ubuntu:trusty
Tested environments:
- [Linode 1G Ubuntu 14.04 LTS]
- [Vultr 768MB Ubuntu 14.04 LTS]
- [DigitalOcean 512MB Docker 1.2.0 on Ubuntu 14.04]