Не запускается OpenVPN сервер на VPS.
Не удаётся уже несколько дней поставить сервер OpenVPN на VPS. Хотя PPTP VPN ставится легко. Ставил разными способами (почти каждый раз переустанавливал ОС), но все они приводят к одной и той же ошибке. Сервер на Ubuntu 18.04 64 bit.
Последний раз попробовал поставить с помощью https://github.com/Nyr/openvpn-install server.conf:
port 1194
proto udp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log /var/log/openvpn/openvpn.log
verb 3
crl-verify crl.pem
openvpn.log (такой или похожий лог при каждом способе установки был):
OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] bui$
library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08
Diffie-Hellman initialized with 2048 bit key
Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
TUN/TAP device tun0 opened
Note: Cannot set tx queue length on tun0: Inappropriate ioctl for device (errno=25)
do_ifconfig, tt->did_ifconfig_ipv6_setup=0
/sbin/ip link set dev tun0 up mtu 1500
openvpn_execve: unable to fork: Resource temporarily unavailable (errno=11)
Exiting due to fatal error
iptables-save:
# Generated by iptables-save v1.6.1 on Mon Jul 15 15:52:37 2019
*nat
:PREROUTING ACCEPT [43807:6580457]
:INPUT ACCEPT [693:43434]
:OUTPUT ACCEPT [4:262]
:POSTROUTING ACCEPT [4:262]
-A POSTROUTING -s 10.8.0.0/24 ! -d 10.8.0.0/24 -j SNAT --to-source 91.211.244.97
COMMIT
# Completed on Mon Jul 15 15:52:37 2019
# Generated by iptables-save v1.6.1 on Mon Jul 15 15:52:37 2019
*mangle
:PREROUTING ACCEPT [45566:6725643]
:INPUT ACCEPT [2367:178474]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [2106:319797]
:POSTROUTING ACCEPT [2106:319797]
COMMIT
# Completed on Mon Jul 15 15:52:37 2019
# Generated by iptables-save v1.6.1 on Mon Jul 15 15:52:37 2019
*security
:INPUT ACCEPT [2367:178474]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [2106:319797]
COMMIT
# Completed on Mon Jul 15 15:52:37 2019
# Generated by iptables-save v1.6.1 on Mon Jul 15 15:52:37 2019
*raw
:PREROUTING ACCEPT [45566:6725643]
:OUTPUT ACCEPT [2106:319797]
COMMIT
# Completed on Mon Jul 15 15:52:37 2019
# Generated by iptables-save v1.6.1 on Mon Jul 15 15:52:37 2019
*filter
:INPUT ACCEPT [2366:178090]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [2106:319797]
-A INPUT -p udp -m udp --dport 1194 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 10.8.0.0/24 -j ACCEPT
COMMIT
# Completed on Mon Jul 15 15:52:37 2019
Спрашивал техподдержку VPS:
- tun модуль включён
- никаких запретов для OpenVPN они не делают
- никаких ограничений на маршрутизацию не делают