Adding https connection

[JKnott]

I'm thinking about adding an OpenVPN connection that uses https on port 443. Other than changing the endpoint protocol and port, is there anything else to worry about? I know it will use different subnets from my existing UDP 1194 connection.

tnx jk

[johnpoz]

@jknott I run a instance on tcp 443..

I even do port sharing on it via ha proxy, so I can still leverage 443 for service on device behind pfsense.

Yeah just use a different tunnel network..

When traffic hits my wan IP on 443, and its not openvpn traffic - openvpn hands it off and haproxy forwards it to service behind pfsense.

custom option

port-share 127.0.0.1 9443

Running on tcp 443 comes in handy when your at a location that blocks UDP 1194.. If they have any sort of internet at all 443 is going to be open.. You can even get through a work proxy with tcp on 443.

While its not the best optimal choice for overall openvpn performance - it works, and allows for access from places that otherwise not able to connect to your vpn from.

[JKnott]

@johnpoz said in Adding https connection:

Running on tcp 443 comes in handy when your at a location that blocks UDP 1194

That's exactly why I'm doing it. Some places, such as the local library, block anything other than browsers. I'm aware of the issues of running TCP on top of TCP. I don't run anything else on 443. The pfSense GUI is plain HTTP on port 80.