Can I create 2 separate VPN servers in TrueNAS SCALE ?

[vn_mnm]

Hello everyone,

I look forward to creating 2 separate VPN servers on my TrueNAS SCALE. One using TCP, another using UDP. Can this be achieved ?

Thank you very much in advance.

 

[sretalla]

One with the Service (probably should be the UDP one) and one with docker.

 

[vn_mnm]

One with the Service (probably should be the UDP one) and one with docker.

Thanks for your reply.

Is it sensible to raise a feature request to iXSystems to allow a built-in VPN server functionality into TrueNAS system so that it can also handle multiplle different VPN profiles running TDP and UDP without having to rely on virtual machines ?

 

[sretalla]

Is it sensible to raise a feature request to iXSystems to allow a built-in VPN server functionality into TrueNAS system so that it can also handle multiplle different VPN profiles running TDP and UDP without having to rely on virtual machines ?

What I suggested doesn't involve virtual machines.

You're always able to raise a feature request.

I don't think that "feature" will get much support, so be prepared for disappointment if you do raise it.

 

[ChrisRJ]

What is the use-case here?

 

[vn_mnm]

What is the use-case here?

I am going to work away from home at a foreign location for 12 months or more. I want TCP VPN for file transferring & remote access to home site, while the UDP VPN will be for video call or conference. Thus, I look forward to the ability to create both TCP & UDP VPN servers.

 

[vn_mnm]

What I suggested doesn't involve virtual machines.

You're always able to raise a feature request.

I don't think that "feature" will get much support, so be prepared for disappointment if you do raise it.

Well correct me if I am wrong, but to me, Docker = VM.

 

[li_chang]

I am going to work away from home at a foreign location for 12 months or more. I want TCP VPN for file transferring & remote access to home site, while the UDP VPN will be for video call or conference. Thus, I look forward to the ability to create both TCP & UDP VPN servers.

Hi,

UDP VPN is fine given that you will run protocols (ssh, smb, etc.) which have their own error correction. In other words, although the VPN connection is based on UDP, if the packet is lost, the upper-layer protocol will detect it and retransmit. (Please let me know if I am wrong).

 

[sretalla]

Well correct me if I am wrong, but to me, Docker = VM

OK, I'll correct you... Docker (all container engines) are specifically not VMs, but rather use an already running OS to present one or multiple containers with the OS plumbing which doesn't need to be re-loaded for each.

A VM requires running an entirely separate OS from the host/hypervisor in addition to the desired applications, so is not at all the same thing as containers, which can be super-minimal in resource requirements as they piggy-back on the host OS.

Perhaps you're thinking of TrueNAS CORE, where it was/is necessary to run a VM in order to use docker since there's no supported docker engine for FreeBSD. Although in that case Jails would be the equivalent (actually FreeBSD jails were the original inspiration for linux containers/docker).

Maybe that explanation is a bit dry without a diagram, so please feel free to refer to the diagram (and text) in the article from the docker blog site:

Containers and VMs Together - Docker

Learn from Docker experts to simplify and advance your app development and management with Docker. Stay up to date on Docker events and new version

www.docker.com

 

[vn_mnm]

Hi,

UDP VPN is fine given that you will run protocols (ssh, smb, etc.) which have their own error correction. In other words, although the VPN connection is based on UDP, if the packet is lost, the upper-layer protocol will detect it and retransmit. (Please let me know if I am wrong).

Hello buddy,
Thanks for your reply. I am running this TrueNAS server of mine under a Dual-WAN load-balancing router. Using UDP will make the client computer unable to comunicate with the TrueNAS anymore in case of the router switching to the other WAN interface. This is why TCP might be my only choice here despite knowing that UDP is superior speed wise. Please refer to here for comparison between UDP vs. TCP.

 

[diskdiddler]

Well correct me if I am wrong, but to me, Docker = VM.

Docker is not a VM, significantly less overhead, less maintenance, easier to update, easier to remove from system without leaving any damage.

It's very good.

 

[li_chang]

Hello buddy,
Thanks for your reply. I am running this TrueNAS server of mine under a Dual-WAN load-balancing router. Using UDP will make the client computer unable to comunicate with the TrueNAS anymore in case of the router switching to the other WAN interface. This is why TCP might be my only choice here despite knowing that UDP is superior speed wise. Please refer to here for comparison between UDP vs. TCP.

Just to clarify, did you mean if you use udp-based vpn, your client computer cannot connect to truenas? or you think there might be chance that the transmission packets are corrupted and undetected?