I've been experimenting with advanced VPN routing using Linux namespaces and wanted to share a reproducible lab setup I built. It chains multiple...
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/CloseTheMarkets on 2025-05-17 07:16:40+00:00.

I’ve been experimenting with advanced VPN routing using Linux namespaces and wanted to share a reproducible lab setup I built.

It chains multiple VPNs (WireGuard over OpenVPN), each inside isolated netns, with traffic routed via veth pairs and controlled through iptables and ip rule.

The project includes:

  • netns isolation

  • tun1 detection and default route override

  • full NAT and DNS leak prevention

  • separation of routing tables per client/session

  • raw shell scripts only (no docker/python dependencies)

Useful for studying multi-tenant VPN infrastructure, split routing, or real-world tunneling setups.

Repo (with scripts): https://github.com/darksunstealth/multi-vps-routing

Not a blog. No traffic redirection. Just plain shell scripts and network configs.

Would appreciate any critique or thoughts on hardening further.