Softether on VPS Using Local Bridge Rumi, April 4, 2020 Problem on SecureNAT SecureNAT is a fairly simple way to setup Softether. You don’t need a lot of sysadmin skill and network understanding in order to get Softether up and running. The problem is SecureNAT is a bit SLOW. I will show a comparison at the end of this article. We can boost the performance using a local bridge. Softether using local bridge To start with you need Softether installed and setup. You can follow the guide on Softether on VPS Just skip the last step “Enable the Virtual NAT” Local bridge Setup Network setup VPN Server IP: 192.168.7.1 VPN Client IP Range: 192.168.7.50-192.168.7.60 Tap Device name: tap_soft From here we go to the “Local Bridge Setting” Local Bridge Setting First we choose the Virtual Hub. It should be only one for normal setup. Then we check the tap device box. After that we type in the name of the tap device(I use soft here for simplicity). Create Local Bridge After the creation of the local bridge we jump back to our server. And run # ifconfig tap_soft It should show you something similar to this Check on the server Because we are not going to use SecureNAT and SecureDHCP. We need to install a DHCP server on our VPS. We are going to use dnsmasq as our DHCP server. # apt-get install dnsmasq Now edit the /etc/dnsmasq.conf file. Add these 3 lines at the end. interface=tap_soft dhcp-range=tap_soft,192.168.7.50,192.168.7.60,12h dhcp-option=tap_soft,3,192.168.7.1 The above 3 lines are used to enable the dhcp server on interface tap_soft. Next step we need a new set of init script which will config tap interface for us when Softether start up. /etc/init.d/vpnserver #!/bin/sh ### BEGIN INIT INFO # Provides: vpnserver # Required-Start: $remote_fs $syslog # Required-Stop: $remote_fs $syslog # Default-Start: 2 3 4 5 # Default-Stop: 0 1 6 # Short-Description: Start daemon at boot time # Description: Enable Softether by daemon. ### END INIT INFO DAEMON=/usr/local/vpnserver/vpnserver LOCK=/var/lock/subsys/vpnserver TAP_ADDR=192.168.7.1 test -x $DAEMON || exit 0 case "$1" in start) $DAEMON start touch $LOCK sleep 1 /sbin/ifconfig tap_soft $TAP_ADDR ;; stop) $DAEMON stop rm $LOCK ;; restart) $DAEMON stop sleep 3 $DAEMON start sleep 1 /sbin/ifconfig tap_soft $TAP_ADDR ;; *) echo "Usage: $0 {start|stop|restart}" exit 1 esac exit 0 Then we need to enable NAT on linux server. Add this file to /etc/sysctl.d/ to enable ipv4 forwarding. /etc/sysctl.d/ipv4_forwarding.conf net.ipv4.ip_forward = 1 Apply the sysctl run # sysctl --system Then we add a POSTROUTING rule to iptables # iptables -t nat -A POSTROUTING -s 192.168.7.0/24 -j SNAT --to-source [YOUR VPS IP ADDRESS] To make our iptables rule survive after reboot install iptables-persistent # apt-get install iptables-persistent After all the above setting, restart the vpnserver then we are good to go. # /etc/init.d/vpnserver restart # /etc/init.d/dnsmasq restart Comparison on SecureNAT and local bridge method. Speed test on local bridge Speed test on SecureNAT Conclusion Local bridge use far less CPU resources than SecureNAT. It is a bit trouble to setup but I think it is worth to use local bridge. Src: http://www.auxnet.org/index.php/the-news/194-softether-on-vps-using-local-bridge Related Administrations Configurations (Linux) CentOS 7Softether
Upgrade Debian 9 to Debian 10 July 19, 2021 Update ALL existing installed packages Before you upgrade your Debian version to 10, you must apply all security patches and pending upgrades to Debian 9 itself Hence, Type the following apt command or apt-get command: sudo apt update sudo apt upgrade sudo apt full-upgrade sudo apt –purge autoremove OR sudo… Read More
Create a Sudo User on Debian or Ubuntu January 29, 2017 Log in to your server as the root user. ssh root@server_ip_address Use the adduser command to add a new user to your system. Be sure to replace username with the user that you want to create. adduser username Set and confirm the new user’s password at the prompt. A strong… Read More
Install WHMCS on CentOS 7 May 25, 2020May 25, 2020 As you may know, WHMCS is the leading web hosting management and billing software that automates all aspects of your business from billing, provisioning, domain reselling and etc. In this article, we are going to install WHMCS 7.7.1 on CentOS 7.6. We assume you have a valid WHMCS license and… Read More