Pritunl client

Skip to content Navigation Menu GitHub Copilot Write better code with AI Security Find and fix vulnerabilities Actions Automate any workflow Codespaces Instant dev environments Issues Plan and track work Code Review Manage code changes Discussions Collaborate outside of code Code Search Find more, search less Explore Learning Pathways Events & Webinars Ebooks & Whitepapers Customer Stories Partners Executive Insights GitHub Sponsors Fund open source developers The ReadME Project GitHub community articles Enterprise platform AI-powered developer platform Pricing Provide feedback Saved searches Use saved searches to filter your results more quickly ;ref_cta:Sign up;ref_loc:header logged out"}"> Sign up Overview Repositories Projects Packages People Pinned Loading Enterprise VPN server Python 4.6k 620 Private cloud virtualization platform Go 139 33 Pritunl OpenVPN client TypeScript 1.3k 238 Pritunl link client Go 40 19 Endpoint security and monitoring Go 12 11 Repositories --> Type Select type All Public Sources Forks Archived Mirrors Templates Language Select language All Go HTML JavaScript Makefile Python Ruby Shell Standard ML TypeScript Sort Select order Last updated Name Stars Showing 10 of 41 repositories pritunl/pritunl-cloud’s past year of commit activity pritunl/pritunl-client-electron’s past year of commit activity pritunl/pritunl-zero’s past year of commit activity pritunl/pritunl-link’s past year of commit activity Go 40 19 0 0 Updated Mar 5, 2025 pritunl Public Enterprise VPN server pritunl/pritunl’s past year of commit activity tools Public Golang base library pritunl/tools’s past year of commit activity Go 1 BSD-3-Clause 0 0 0 Updated Feb 15, 2025 pritunl/pritunl-pacur’s past year of commit activity Shell 9 7 0 0 Updated Feb 11, 2025 pritunl/pritunl-dns’s past year of commit activity Go 29 17 0 0 Updated Feb 12, 2025 pritunl/pritunl-web’s past year of commit activity Go 30 22 0 0 Updated Feb 12, 2025 pritunl/pritunl.github.io’s past year of commit activity JavaScript 11 13 0 2 Updated Jan 18, 2025 Most used topics

Mapping Map connected vpn clients to dns domains such as user0.org0.vpn using a custom dns server that runs along with the Pritunl server DNS forwarding Forward dns queries to a dns server on a remote network such as a consul server on an AWS VPC Monitoring Monitor server and user metrics with InfluxDB Advanced auditing Optional advanced auditing of user and administrator related events for improved security and intrusion detection Bridged VPN mode Create tap servers that bridge the vpn clients to the servers local network interface. Allowing vpn clients to get an ip address on the servers local network Multiple administrators Allow multiple administrators to manage the Pritunl server User pin policy Control over requiring users to set a pin before they are able to connect to a vpn server Plugin system Integrate Pritunl with other systems using plugins writen in Python API access Manage Pritunl cluster using RESTful API with support for multiple API keys IPsec site-to-site links Site-to-site links with IPsec using pritunl-link client. Link client does not require database connection Multi-Cloud VPC peering Simple VPC peering and hybrid cloud with Pritunl link client Automated link failover Link failover with automated routing table management and automated port forwarding for Unifi links $70/month Subscribe Enterprise+ 7 Day Free Trial All Premium features All of the features included with a Premium subscription All Enterprise features All of the features included with a Enterprise subscription Unlimited links No limit on the number of Pritunl link clients in a single Pritunl cluster IPsec site-to-site links Site-to-site links with IPsec using pritunl-link client. Link client does not require database connection Multi-Cloud VPC peering Simple VPC peering and hybrid cloud with Pritunl link client Automated link failover Link failover with automated routing table management and automated port forwarding for Unifi links $100/month Subscribe Install Select a Linux distribution below and run the commands to install Pritunl. After installing no setup is necessary simply open the web interface at in your web browser and login with the default username and password which is "pritunl". Arch Linux AmazonLinux 2023 AlmaLinux 8 AlmaLinux 9 Debian Bookworm

The number of users created or users connected Unlimited devices No limit on the number of devices that each user has connected Port forwarding Forward ports to vpn clients Gateway links Create a gateway link to route traffic for a local network to a vpn client. Allowing the vpn clients to access the remote network that is available to the linked vpn client Failover gateway links Connect multiple gateway links to a Pritunl server and when a link goes down another available link will automatically be used Bypass secondary auth Per-user option to bypass secondary authentication such as two-factor authentication. For server users that can't provide a two-factor code Chromebook support Easily connect Chromebook users with ChromeOS compatible vpn profiles Configuration sync When clients connect with a Pritunl client, vpn setting changes such as port/protocol will be updated to allow the client to connect without needing to download a new configuration Email user keys Email users a link to download vpn profiles using a configured SMTP server Additional themes Change the interface to light or dark theme $10/month Subscribe Enterprise 7 Day Free Trial All Premium features All of the features included with a Premium subscription Billing per host Each Pritunl host is billed at $70/month. The host can contain an unlimited number of VPN servers and unlimited number of users or connections Single sign-on Single sign-on with SAML, Google Apps, Duo Security and Radius TPM device authentication Device authentication with TPM and Apple Secure Enclave Automatic failover When a Pritunl instance fails the vpn servers running on the instance will automatically failover to another available Pritunl instance Replicated servers Replicate a vpn server accross multiple Pritunl instances to easily scale horizontally to handle more user connections VXLan support Automatic VXLan management for replication across availability zones without layer 2 connectivity while still maintaining client-to-client communication AWS VPC integration Integrate with AWS VPC to allow Pritunl to dynamically control the VPC routing table Site-to-site VPN Easily create a site-to-site link between two Pritunl instances without any complicated configuration Server route NAT control Enable or disable NAT for server routes DNS

Older OpenVPN builds will have connection issues with newer client releases. To fix this issue run the command below to install the newer OpenVPN package from the Pritunl repository. A TCP server can also be used as a workaround to fix some of the issues.RHEL, Oracle Linux, Alma Linux, AmazonLinuxThe pritunl-openvpn package is available on all the Pritunl RHEL repositories and will provide the latest version of OpenVPN.Pritunl OpenVPN Install RHEL 7sudo yum swap openvpn pritunl-openvpnPritunl OpenVPN Install RHEL 8+sudo yum --allowerasing install pritunl-openvpnThis can be reverted by running the command below.OpenVPN Installsudo yum --allowerasing install openvpnUbuntuFor Ubuntu use the OpenVPN Debian/Ubuntu repositories by running the commands below.Ubuntu 20.04Ubuntu 22.04Ubuntu 24.04Debian 10Debian 11Debian 12sudo tee /etc/apt/sources.list.d/openvpn.list << EOFdeb [ signed-by=/usr/share/keyrings/openvpn-repo.gpg ] focal mainEOFcurl -fsSL | sudo gpg -o /usr/share/keyrings/openvpn-repo.gpg --dearmor --yessudo apt updatesudo apt --assume-yes install openvpnsudo tee /etc/apt/sources.list.d/openvpn.list << EOFdeb [ signed-by=/usr/share/keyrings/openvpn-repo.gpg ] jammy mainEOFcurl -fsSL | sudo gpg -o /usr/share/keyrings/openvpn-repo.gpg --dearmor --yessudo apt updatesudo apt --assume-yes install openvpnsudo tee /etc/apt/sources.list.d/openvpn.list << EOFdeb [ signed-by=/usr/share/keyrings/openvpn-repo.gpg ] noble mainEOFcurl -fsSL | sudo gpg -o /usr/share/keyrings/openvpn-repo.gpg --dearmor --yessudo apt updatesudo apt --assume-yes install openvpnsudo tee /etc/apt/sources.list.d/openvpn.list << EOFdeb [ signed-by=/usr/share/keyrings/openvpn-repo.gpg ] buster mainEOFcurl -fsSL | sudo gpg -o /usr/share/keyrings/openvpn-repo.gpg --dearmor --yessudo apt updatesudo apt --assume-yes install openvpnsudo tee /etc/apt/sources.list.d/openvpn.list << EOFdeb [ signed-by=/usr/share/keyrings/openvpn-repo.gpg ] bullseye mainEOFcurl -fsSL | sudo gpg -o /usr/share/keyrings/openvpn-repo.gpg --dearmor --yessudo apt updatesudo apt --assume-yes install openvpnsudo tee /etc/apt/sources.list.d/openvpn.list << EOFdeb [ signed-by=/usr/share/keyrings/openvpn-repo.gpg ] bookworm mainEOFcurl -fsSL | sudo gpg -o /usr/share/keyrings/openvpn-repo.gpg --dearmor --yessudo apt updatesudo apt --assume-yes install openvpn" data-testid="RDMD">Older OpenVPN builds will have connection issues with newer client releases. To fix this issue run the command below to install the newer OpenVPN package from the Pritunl repository. A TCP server can also be used as a workaround to fix some of the issues.The pritunl-openvpn package is available on all the Pritunl RHEL repositories and will provide the latest version of OpenVPN.sudo yum swap openvpn pritunl-openvpnsudo yum --allowerasing install pritunl-openvpnThis can be reverted by running the command below.sudo yum --allowerasing install openvpnFor Ubuntu use the OpenVPN Debian/Ubuntu repositories by running the commands below.sudo tee /etc/apt/sources.list.d/openvpn.list sudo tee /etc/apt/sources.list.d/openvpn.list sudo tee /etc/apt/sources.list.d/openvpn.list sudo tee /etc/apt/sources.list.d/openvpn.list sudo tee /etc/apt/sources.list.d/openvpn.list sudo tee /etc/apt/sources.list.d/openvpn.list Updated 5 months ago Table of ContentsRHEL, Oracle Linux, Alma Linux, AmazonLinuxUbuntu

If you want to make your Mikrotik to be OpenVPN Client you can follow this guide.GoalsCan remote mikrotik from Pritunl VPN Server EndpointEnvironmentMikrotikPritunl ServerExecutionInstall Pritunl. Here.Create TCP Server with TLS Auth & lzo compression disable## Stop servermongo pritunldb.servers.update({"name" : "mikrotik"}, {$set: { "tls_auth" : false}})db.servers.update({"name" : "mikrotik"}, {$set: { "lzo_compression" : "adaptive"}})Verify :db.servers.find({"name" : "mikrotik"}, {name:1, tls_auth:1})## Restart serverDump profile VPNCreate 2 file, crt & key you can get from your .ovpn filenano crt.crt #include ca & crtnano key.keyImport to Mikrotikscp crt.crt [email protected]:/scp crt.key [email protected]:/certificate import file-name=crt.crtcertificate import file-name=key.keycertificate printCreate ovpn profileppp profile add name=OVPN-client change-tcp-mss=yes only-one=yes use-encryption=yes use-mpls=no use-compression=noppp profile printCreate interface on PPPinterface ovpn-client add name=ovpn-client connect-to=xxx.xxx.xxx.xxx port=1194 mode=ip user="openvpn" password="" profile=OVPN-client certificate=client.crt_0 auth=sha1 cipher=blowfish128 add-default-route=yesVerifyinterface ovpn-client printinterface ovpn-client monitor 0ip route printEnable SSH Tunnel MikrotikActivate SSH on IP > Service > SSH/ip ssh set forwarding-enabled=bothAccessSo you can ssh your Mikrotik with IP Internal VPN:22ssh mikrotik@ip_internal_vpn -D 500You can access on SOCKSv5 500 to reach network mikrotik pools.Reference

Add authentication to MongoDBThese instructions are for Oracle Linux 7. The commands for other distributions will be different. First install and start MongoDB.Installsudo tee /etc/yum.repos.d/mongodb-org-4.0.repo << EOF[mongodb-org-4.0]name=MongoDB Repositorybaseurl= yum -y install mongodb-orgsudo systemctl start mongodsudo systemctl enable mongodThen create an admin user by first connecting with the mongo cli. Once connected switch to the admin database and run the create user command. Change the PASSWORD below to a secure random password.Create Adminmongouse admin;db.createUser( { user: "admin", pwd: "PASSWORD", roles: [ "userAdminAnyDatabase", "dbAdminAnyDatabase", "readWriteAnyDatabase" ] });After the user has been created edit the MongoDB configuration to enable authorization. The net section should be replaced with the section below.Shellsudo nano /etc/mongod.confsecurity: authorization: enabledCreate Pritunl UserThen create a pritunl user for the prituinl database in the admin database. First connect with the mongo cli using the admin account then switch to the admin database. Change the PASSWORD below to a secure random password. When authenticating from mongo cli tools use --authenticationDatabase admin.If configuring Pritunl Zero or Pritunl Cloud update the name of the database below.Create Usermongo --host subnet.domain.com -u admin --authenticationDatabase adminuse admin;db.createUser({ user: "pritunl", pwd: "PASSWORD", roles: [{role: "dbOwner", db: "pritunl"}]});Test the new use with the command below.Test Usermongo --host mongo-test.silicon.red -u pritunl --authenticationDatabase admin pritunlConnecting to MongoDBWhen configuring Pritunl the username, password and ssl option must be added to the MongoDB uri. Such as mongodb://pritunl:[email protected]:27017/pritunl?authSource=admin If configuring Pritunl Zero or Pritunl Cloud update the name of the database.Authentication DatabaseIf the authentication user is on a different database the authSource parameter must be included in the MongoDB uri. Such as mongodb://pritunl:[email protected]:27017/pritunl?authSource=admin" data-testid="RDMD">These instructions are for Oracle Linux 7. The commands for other distributions will be different. First install and start MongoDB.sudo tee /etc/yum.repos.d/mongodb-org-4.0.repo Then create an admin user by first connecting with the mongo cli. Once connected switch to the admin database and run the create user command. Change the PASSWORD below to a secure random password.mongouse admin;db.createUser( { user: "admin", pwd: "PASSWORD", roles: [ "userAdminAnyDatabase", "dbAdminAnyDatabase", "readWriteAnyDatabase" ] });After the user has been created edit the MongoDB configuration to enable authorization. The net section should be replaced with the section below.sudo nano /etc/mongod.confsecurity: authorization: enabledThen create a pritunl user for the prituinl database in the admin database. First connect with the mongo cli using the admin account then switch to the admin database. Change the PASSWORD below to a secure random password. When authenticating from mongo cli tools use --authenticationDatabase admin.If configuring Pritunl Zero or Pritunl Cloud update the name of the database below.mongo --host subnet.domain.com -u admin --authenticationDatabase adminuse admin;db.createUser({ user: "pritunl", pwd: "PASSWORD", roles: [{role: "dbOwner", db: "pritunl"}]});Test the new use with the command below.mongo --host mongo-test.silicon.red -u pritunl --authenticationDatabase admin pritunlWhen configuring Pritunl the username, password and ssl option must be added to the MongoDB uri. Such as mongodb://pritunl:[email protected]:27017/pritunl?authSource=admin If configuring Pritunl Zero or Pritunl Cloud update the name of the database.If the authentication user is on a different database the authSource parameter must be included in the MongoDB uri. Such as mongodb://pritunl:[email protected]:27017/pritunl?authSource=adminUpdated over 5 years