Would it be possible to run rTorrent/ruTorrent & VPN in a jail?

[PostHEX]

And would it be possible to run 4 of such jails at the same time?

This is what I have in mind:
(VPN = the provider, User = a user slot out of the max of users the provider simultaneously permits, Torrent Client = a separate installation in its respective jail)

[VPN1, User1 + Torrent Client1] = Jail1
[VPN1, User2 + Torrent Client2] = Jail2
[VPN2, User1 + Torrent Client3] = Jail3
[VPN2, User2 + Torrent Client4] = Jail4

Bear with me if this doesn't make sense on why anyone would want to implement such a structure, but I'm in a situation where such a system -- granted it will technically work -- would be the lowest cost option for me over the longterm.


P.S. I hope I've posted this in te right forum section.

 

[dlavigne]

Did you try this, and if so, did it work as you expected?

 

[PostHEX]

Of course I didn't try it. Hence why I'm asking if anyone would know if such a thing would be possible. :)

 

[pirateghost]

Of course I didn't try it. Hence why I'm asking if anyone would know if such a thing would be possible. :)

This sounds like one of those things that requires you to try it...

 

[PostHEX]

Right after I'd know where to start.

 

[PostHEX]

Right after I'd know where to start.

 

[pirateghost]

Fire up a jail.
Configure your application (s)

Fire up a second jail.
Configure your application (s)

 

[PostHEX]

So I'd just have to click my heels three times and all is configured? :)

Jokes aside, I'll try to mess around when I'm not so occupied as I currently am. I'd most likely have no idea what I would be doing though. In the meanwhile, if someone is familiar with what I'd like to build, I'd very much appreciate some insight into your experience.

 

[pirateghost]

It just sounds like you want a jail. With some applications installed. It's not really any different from installing other apps. Lots of tutorials around here for installing applications in jails

 

[INCSlayer]

i have something similar setup for transmission and that works fine. I have a dedicated transmission for my sickrage jail and a general purpose one for non automated torrenting.
aslong as you give them different ports there shouldnt be any issues.

 

[PostHEX]

i have something similar setup for transmission and that works fine. I have a dedicated transmission for my sickrage jail and a general purpose one for non automated torrenting.
aslong as you give them different ports there shouldnt be any issues.

Thank you very much. That was exactly what I needed to hear! :)

 

[Nick2253]

Perhaps it's overkill, but I would isolate the VPNs to their own jails, and the torrent programs to their own jails. Then, use the pf firewall in FreeNAS to network them together as appropriate. That way you can properly firewall the VPN connections (you can't run pf from a jail).

Otherwise, you are basically giving anything that can connect to your VPN free reign over you torrent boxes, which probably have pretty liberal access to a bunch of storage you don't want messed with.

 

[PostHEX]

Thanks for the heads-up Nick2253. And yet another confirmation that I should ask before screwing around. I'm quite sure I would've made that mistake if I hadn't. :)

 

[Nick2253]

I wouldn't really call it a "mistake" per se, because I know at least a couple guys here have that exact setup (VPN and torrenting in the same jail). In fact, I think there's a guide that accomplishes the same thing.

However, my view with jails is very similar to my view towards virtual machines: each virtual machine/jail should be treated as a stand-alone appliance, that does one thing, rather than lumping a bunch of things together (which is the traditional "physical" model). From that perspective, I would aim for modularity: VPN in one jail, torrenting in another.

There is definitely an additional initial setup penalty that you have to pay with this kind of setup. But I think that it's worth it because you don't ever have to repeat for everything it if you just want to change one thing. For example: if Transmission isn't floating your boat, dump it, and get rtorrent. Now, instead of trying to figure out how to re-setup your VPN in your new rtorrent jail, you simple change a firewall rule and you're good to go. Or, you don't like OpenVPN, and want something different? Etc.

 

[teddybeartechie]

I wouldn't really call it a "mistake" per se, because I know at least a couple guys here have that exact setup (VPN and torrenting in the same jail). In fact, I think there's a guide that accomplishes the same thing.

However, my view with jails is very similar to my view towards virtual machines: each virtual machine/jail should be treated as a stand-alone appliance, that does one thing, rather than lumping a bunch of things together (which is the traditional "physical" model). From that perspective, I would aim for modularity: VPN in one jail, torrenting in another.

There is definitely an additional initial setup penalty that you have to pay with this kind of setup. But I think that it's worth it because you don't ever have to repeat for everything it if you just want to change one thing. For example: if Transmission isn't floating your boat, dump it, and get rtorrent. Now, instead of trying to figure out how to re-setup your VPN in your new rtorrent jail, you simple change a firewall rule and you're good to go. Or, you don't like OpenVPN, and want something different? Etc.

Do you have a guide somewhere on here that shows how to do that! It sounds like something I would like to do. That way once I get something working I don't have to scrap it when I add something else and it breaks it lol.