Using OpenVPN with HTTP or SOCKS proxies

OpenVPN supports operation through an HTTP or SOCKS proxy with no authentication, with basic authentication and with NTLM authentication. We will cover both HTTP and SOCKS proxy servers, both with and without authentication.

HTTP proxies

HTTP proxies require the use of TCP for the OpenVPN tunnel transport. If you are currently using UDP, the protocol argument in both the server as well as the client configurations will need to be updated:

proto tcp

Once configured, add proxy support to the client by adding the --http-proxy configuration directive. As an example, let's assume your local area network requires an anonymous proxy for outbound connections and that server is at 192.168.4.4 on the default port

Get Mastering OpenVPN now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.