Не удаётся уже несколько дней поставить сервер OpenVPN на VPS. Хотя PPTP VPN ставится легко. Ставил разными способами (почти каждый раз переустанавливал ОС), но все они приводят к одной и той же ошибке. Сервер на Ubuntu 18.04 64 bit.
Последний раз попробовал поставить с помощью https://github.com/Nyr/openvpn-install server.conf:
port 1194
proto udp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log /var/log/openvpn/openvpn.log
verb 3
crl-verify crl.pem
openvpn.log (такой или похожий лог при каждом способе установки был):
OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] bui$
library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08
Diffie-Hellman initialized with 2048 bit key
Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
TUN/TAP device tun0 opened
Note: Cannot set tx queue length on tun0: Inappropriate ioctl for device (errno=25)
do_ifconfig, tt->did_ifconfig_ipv6_setup=0
/sbin/ip link set dev tun0 up mtu 1500
openvpn_execve: unable to fork: Resource temporarily unavailable (errno=11)
Exiting due to fatal error
iptables-save:
# Generated by iptables-save v1.6.1 on Mon Jul 15 15:52:37 2019
*nat
:PREROUTING ACCEPT [43807:6580457]
:INPUT ACCEPT [693:43434]
:OUTPUT ACCEPT [4:262]
:POSTROUTING ACCEPT [4:262]
-A POSTROUTING -s 10.8.0.0/24 ! -d 10.8.0.0/24 -j SNAT --to-source 91.211.244.97
COMMIT
# Completed on Mon Jul 15 15:52:37 2019
# Generated by iptables-save v1.6.1 on Mon Jul 15 15:52:37 2019
*mangle
:PREROUTING ACCEPT [45566:6725643]
:INPUT ACCEPT [2367:178474]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [2106:319797]
:POSTROUTING ACCEPT [2106:319797]
COMMIT
# Completed on Mon Jul 15 15:52:37 2019
# Generated by iptables-save v1.6.1 on Mon Jul 15 15:52:37 2019
*security
:INPUT ACCEPT [2367:178474]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [2106:319797]
COMMIT
# Completed on Mon Jul 15 15:52:37 2019
# Generated by iptables-save v1.6.1 on Mon Jul 15 15:52:37 2019
*raw
:PREROUTING ACCEPT [45566:6725643]
:OUTPUT ACCEPT [2106:319797]
COMMIT
# Completed on Mon Jul 15 15:52:37 2019
# Generated by iptables-save v1.6.1 on Mon Jul 15 15:52:37 2019
*filter
:INPUT ACCEPT [2366:178090]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [2106:319797]
-A INPUT -p udp -m udp --dport 1194 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 10.8.0.0/24 -j ACCEPT
COMMIT
# Completed on Mon Jul 15 15:52:37 2019
Спрашивал техподдержку VPS:
- tun модуль включён
- никаких запретов для OpenVPN они не делают
- никаких ограничений на маршрутизацию не делают
