Split Tunnel Docker Containers

[neiliid]

Hi,

I have setup the split tunnel, following the excellent guide posted on this site. I however run my BT app in a container and the container is not being routed through the VPN, but directly.

The container is being run with the same UID/GUID as the vpn user (as per the tutorial)

Does anyone have any suggestions on what changes need to be made to the iptables and routing files to force the container to use the split tunnel?

Thanks a stack.

[neiliid]

(Mar 16, 2021, 05:02 PM)nie Wrote: Helow all,

Found a solution to the below question.

If you would prefer to run your services in containers and have them route out over a VPN, you can share the network of your VPN container with your other containers.

I have used this container as my vpn service https://hub.docker.com/r/qmcgaw/gluetun, follow the instructions and deploy the vpn container (it is preconfigured to work with a number of popular VPN services, but sadly lacks one or two of the big names.

1. Deploy the glueton container, as part of the configuration, you will need to map the ports you would normally expose for your other containers (e.g for Jackett "-p 9117:9117" and any other ports you need.
2. When deploying your service container (e.g linuxserver/jackett) you need to remove the port mappings from the configuration (as they now reside in the vpn container) and you need to share the network: e.g. "--network container:gluetun"
3. Check that the jackett container is using the VPN but "docker exec -ti jackett /bin/bash" and run "curl ipinfo.io" and you should see your VPNs IP if all worked well.

Things to check are the configuration of the VPN Region, this needs to be worded exactly, check the gluetun logs to see if there are any issues and what needs to be corrected.


-----------
Hi,

I have setup the split tunnel, following the excellent guide posted on this site. I however run my BT app in a container and the container is not being routed through the VPN, but directly.

The container is being run with the same UID/GUID as the vpn user (as per the tutorial)

Does anyone have any suggestions on what changes need to be made to the iptables and routing files to force the container to use the split tunnel?

Thanks a stack.