My random OpenVPN tricks

Blog
Piotr Dobrowolski — Wed 12 December 2018

Proper DNS resolution on modern Linux systems
Change VPN route metrics to fix access when roaming between VPN and "local" network
OpenVPN keys & certificates can be easily embedded into .ovpn file

script-security 2
up /etc/openvpn/update-systemd-resolved/update-systemd-resolved
down /etc/openvpn/update-systemd-resolved/update-systemd-resolved
route-up "/etc/openvpn/change-metric.sh 5000"

# These may be required
#dhcp-option DNS 10.2.3.4
#dhcp-option DOMAIN local.domain.tld

# Extra: ignore default route
#route-nopull
#route 10.2.3.0 255.252.0.0 vpn_gateway