Native VPN Client for containers on ZimaOS

[Mbtx]

I’m using a Gluetun stack with BitTorrent, NZBget, and other apps running in Portainer. It works well, but managing it is a bit of a pain via Portainer. That got me thinking…

It would be awesome if ZimaOS could provide a network option that connects to a VPN as a client, and then allow containers to be assigned to that network. This way, all traffic from those containers would securely pass through the VPN.

Essentially, it would function like Gluetun but natively integrated into ZimaOS—simplified, easier to manage, and designed for containers that must connect via VPN. And please, don’t forget IPv6 support!

[xploz1on]

Yeah, this would be an awesome implementation. I don't think it would be too hard to have it baked into the OS.

@Mbtx You could do this yourself tho. It takes a little bit of time but it is not really hard. Basically you create a docket network, have your VPN up (wg0, just there with Table = off) so it not a wide system VPN. Then we create a custom routing table that points to your VPN, and force your new Docker subnet to use it.
We can also masquerade the traffic so it can pass through the VPN, and block it from leaking if the VPN drops.

So, this is a messy way to do it and that's why most people rather attached Gluetun to the compose files.

But having this messy setup baked in would be super! Another thing would be allowing only VPN to access some of your services.