If your OpenVPN already listen to TCP port, skip this. The things to change is the SSL listener port on Nginx. Important to make sure your OpenVPN on any TCP port not UDP. I keep the same port 22 on SSH so that I can connect SSH normally via port 22 and 443 via sslh, and OpenVPN on 8080/TCP. When it ask you how sslh to be run, choose standalone.
#Openvpn port install#
In my opinion, the best is to install from package distribution not to compile from source as installing from apt can keep track of the package, easy to uninstall and upgrade the package. Install sslh in your server via apt install. Prerequisitesīefore following this guide, I assume you already have Nginx webserver with HTTPS, OpenSSH, and OpenVPN installed.
#Openvpn port how to#
This guide will show you how to install and setup sslh to use SSH, OpenVPN, and HTTPS webserver running on the same port. Its name comes from its original function to serve SSH and HTTPS on the same port. Hence sslh acts as a protocol demultiplexer, or a switchboard. to connect to SSH from inside a corporate firewall, which almost never block port 443) while still serving HTTPS on that port. A typical use case is to allow serving several services on port 443 (e.g. It probes for HTTP, SSL, SSH, OpenVPN, tinc, XMPP are implemented, and any other protocol that can be tested using a regular expression, can be recognised. Sslh accepts connections on specified ports(443) and forwards them further based on test performed on the first data packet sent by the remote client. Mainly it allows SSH server and web server to share same port. Sslh is a program that allows you to run sereval programs on port 443. Ah ha! that's it, just change my SSH or VPN port to 443 since that port is common and less suspicious but you can't just changing the SSH/VPN port to 443 as you have a website running through that port. The quickest way is by using SSH as SOCKS5 proxy or a VPN but the firewall blocks my SSH and VPN ports! After a quick scan, the open ports are 53, 80 and 443. Sometimes when I'm behind a corporate firewall I want to get my connection secure and private against any traffic inspection.
0 kommentar(er)
