• somebodyknows@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    1 year ago

    Couldn’t understand if it’s a client in the sense other docker containers can use it, or what. Could somebody please clarify?

    • gobbling871@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      1 year ago

      It’s a vpn client on steroids that creates a VPN network (based on your provider) which you can then use to run docker containers inside of, as well as create http & shadowsocks proxies for your VPN network etc.

      • finestnothing@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 year ago

        To build on this since I have this setup now, it basically creates a new docker network that you can attach containers to, and have all of their traffic routed through it. Basically I have the gluetun container running, then in my qbittorrent docked-compose I have network_mode: "container:gluetun".

        One thing to watch out for is you have to specify the ports in the gluetun docked-compose instead of in each docked-compose.

        Additionally, if gluetun shuts down and the apps using it don’t, you’ll have to restart the apps using it. Not an issue if it’s all in the same docker-compose file, but I like separating docker-compose services so I have qbittorrent/docker-compose.yml and gluetun/docker-compose.yml

  • macgregor@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    1 year ago

    Switched to qbittorrent+gluetun side car recently and it’s been pretty good compared to the poorly maintained combo torrent+OpenVPN images I was using. Being able to update my torrent client image/config independent from the VPN client is great. Unfortunately most of the docs are Docker focused so it’s a bit of trial and error to get it setup in a non-docker environment like Kubernetes. Here’s my deployment in case it’s useful for anyone. Be careful that you configure qbittirrent to use “tun0” as it’s network interface or you will be exposed (got pinged by AT&T before I realized that one). I’m sure there’s a more robust way to makeuse of gluetun’s DNS over TLS and iptables kill switch that doesn’t require messing with qbittorrent config to secure, but that’s what I have so far and it works well enough for now.

    • roofuskit@kbin.social
      link
      fedilink
      arrow-up
      2
      ·
      1 year ago

      Yeah, the situation you’re describing is impossible with docker because if you set it up as intended there’s no way for your containers to access the Internet without going through the VPN.

      • macgregor@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        Yeah, I know, that’s a huge advantage in this situation, but not one I can take advantage of 🙂

  • JTode@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    1 year ago

    Have been using this for a good six months, works a charm. Not that I steal movies or anything, but I’ve received no bitchy letters from my ISP.

    edit, protip: I got very confused for like 30 hours about how I connect other containers to this, and what you do is, the gluetun container the network stack for the container you want to VPN.

  • roofuskit@kbin.social
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    1 year ago

    I have been using this for months and really like it. But I will warn people how easy it well it works depends heavily on the provider and protocol you use.

    I have some experiences below, but I would just ask the creator of Gluetun what they use because it will be the best documented and supported.

    Cyberghost worked well with OpenVPN but they do not allow port forwarding so I switched to PureVPN. PureVPN was awful, they allow port forwarding but you have to use very specific servers and there’s no way to control that with Open VPN on Gluetun because the server list is not up to date. I tried Wireguard and it worked but the slightest connection drop would cause port forwarding to stop working and I would have to redo the connection with new keys and all every time. Eventually it just stopped working no matter what I did and support was kind enough to refund me. I asked for the remainder of my subscription and not only did they not try to argue they gave me a full refund so that’s points for PureVPN.

    Right now I’m using AirVPN which works really well. Once in a while port forwarding will stop working. But if I switch to another port it works again, so I just keep two ports open and change things client side and that seems to be the path of least resistance.

    Another nice feature of Gluetun is an http proxy you can enable. Handy for private trackers that only let you access it from one IP for downloading and browsing. Just use an automatic proxy switcher in your browser.

    Edit: fixed that last bit that was typed off screen on my phone because the kbin mobile site was being funky.