{"id":27502,"date":"2024-01-28T10:12:32","date_gmt":"2023-10-21T08:10:22","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/"},"modified":"2025-08-12T03:03:57","modified_gmt":"2025-08-11T19:03:57","slug":"%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/","title":{"rendered":"\u4f7f\u7528CentOS8\u7684OpenVPN"},"content":{"rendered":"<h1>\u8d77\u521d\/\u9996\u5148\/\u9996\u5148\u5148\u63d0\u5230<\/p>\n<p>\u6211\u60f3\u4f7f\u7528\u56fa\u5b9aIP\uff0c\u4f46\u4e0d\u60f3\u4f7f\u7528\u4efb\u4f55\u670d\u52a1\uff0c\u800c\u662f\u81ea\u5df1\u521b\u5efa\u3002\u56e0\u6b64\uff0c\u6211\u642d\u5efa\u4e86\u4e00\u4e2aVPN\u670d\u52a1\u5668\u3002\u8bf4\u5230VPN\uff0c\u6709\u4ee5\u4e0b\u51e0\u79cd\u534f\u8bae\u3002<\/p>\n<p>IPsec\uff08\u7f51\u7edc\u534f\u8bae\/\u5b89\u5168\u534f\u8bae\u7684\u4e00\u79cd\uff09<br \/>\nL2TP\uff08\u94fe\u8def\u5c42\u96a7\u9053\u534f\u8bae\uff09<br \/>\nPPTP\uff08\u70b9\u5bf9\u70b9\u96a7\u9053\u534f\u8bae\uff09<br \/>\nSSL-VPN\uff08\u57fa\u4e8eSSL\u7684\u865a\u62df\u4e13\u7528\u7f51\u7edc\uff09<br \/>\nOpenVPN\uff08\u5f00\u653e\u5f0f\u865a\u62df\u4e13\u7528\u7f51\u7edc\uff09<br \/>\nShadowsocks\uff08\u5f71\u68ad\uff09<\/p>\n<p>\u8fd9\u6b21\u6211\u4eec\u4f7f\u7528\u4e86OpenVPN\u8fdb\u884c\u521b\u5efa\u3002<\/p>\n<h1>\u73af\u5883<\/p>\n<ul class=\"post-ul\">\nconoha VPS<br \/>\nOpenVPN\u30b5\u30fc\u30d0\uff1acentos 8.3(\u6700\u5c0f\u30d7\u30e9\u30f3)<br \/>\nOpenVPN\u30af\u30e9\u30a4\u30a2\u30f3\u30c8: macbook(Tunnelblick)\n<\/ul>\n<h1>\u642d\u5efaOpenVPN\u670d\u52a1\u5668\u3002<\/p>\n<p>\u6709\u591a\u79cd\u8ba4\u8bc1\u65b9\u5f0f\uff0c\u4f46\u6211\u4eec\u91c7\u7528\u8bc1\u4e66\u8ba4\u8bc1\u65b9\u5f0f\u3002<br \/>\n\u6211\u4eec\u4f1a\u4e3a\u6bcf\u4e2a\u8fde\u63a5\u7684\u5ba2\u6237\u7aef\u9881\u53d1\u8bc1\u4e66\u3002<br \/>\n\u203b \u8fd9\u6837\u505a\u53ef\u4ee5\u5904\u7406\u5927\u91cf\u4fe1\u606f\u5e76\u4e14\u6613\u4e8e\u6784\u5efa\u3002<\/p>\n<h2>\u5b89\u88c5\u6240\u9700\u7684\u8f6f\u4ef6\u5305\u3002<\/p>\n<p>\u67e5\u770b\u5b98\u65b9\u7f51\u7ad9\u65f6\u770b\u5230\u4ee5 RPM \u65b9\u5f0f\u5b89\u88c5\uff0c\u4f46\u6211\u53d1\u73b0\u53ef\u4ee5\u76f4\u63a5\u4f7f\u7528 DNF \u5b89\u88c5\uff0c\u56e0\u6b64\u9009\u62e9\u4f7f\u7528 DNF \u8fdb\u884c\u5b89\u88c5\u3002<\/p>\n<pre class=\"post-pre\"><code>dnf <span class=\"nt\">-y<\/span> update\r\ndnf <span class=\"nt\">-y<\/span> <span class=\"nb\">install <\/span>openvpn easy-rsa\r\n<\/code><\/pre>\n<h2>\u521b\u5efa\u8bc1\u660e\u4e66<\/p>\n<p>\u4f7f\u7528easy-rsa\u5de5\u5177\u521b\u5efa\u670d\u52a1\u5668\u8bc1\u4e66\u548c\u5ba2\u6237\u7aef\u8bc1\u4e66\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nb\">cd<\/span> \/usr\/share\/easy-rsa\/3\/\r\n<\/code><\/pre>\n<p>\u521d\u59cb\u5316\u8ba4\u8bc1\u673a\u6784\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@hoge 3]# .\/easyrsa init-pki\r\n\r\ninit-pki <span class=\"nb\">complete<\/span><span class=\"p\">;<\/span> you may now create a CA or requests.\r\nYour newly created PKI <span class=\"nb\">dir <\/span>is: \/usr\/share\/easy-rsa\/3\/pki\r\n<\/code><\/pre>\n<p>\u5efa\u7acb\u8ba4\u8bc1\u673a\u6784\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@hoge 3]# .\/easyrsa build-ca\r\nUsing SSL: openssl OpenSSL 1.1.1g FIPS  21 Apr 2020\r\n\r\nEnter New CA Key Passphrase:  <span class=\"c\">#\u4efb\u610f\u306e\u30d1\u30b9\u30ef\u30fc\u30c9<\/span>\r\nRe-Enter New CA Key Passphrase: <span class=\"c\">#\u4efb\u610f\u306e\u30d1\u30b9\u30ef\u30fc\u30c9<\/span>\r\nGenerating RSA private key, 2048 bit long modulus <span class=\"o\">(<\/span>2 primes<span class=\"o\">)<\/span>\r\n............+++++\r\n..........................................+++++\r\ne is 65537 <span class=\"o\">(<\/span>0x010001<span class=\"o\">)<\/span>\r\nYou are about to be asked to enter information that will be incorporated\r\ninto your certificate request.\r\nWhat you are about to enter is what is called a Distinguished Name or a DN.\r\nThere are quite a few fields but you can leave some blank\r\nFor some fields there will be a default value,\r\nIf you enter <span class=\"s1\">'.'<\/span>, the field will be left blank.\r\n<span class=\"nt\">-----<\/span>\r\nCommon Name <span class=\"o\">(<\/span>eg: your user, host, or server name<span class=\"o\">)<\/span> <span class=\"o\">[<\/span>Easy-RSA CA]: <span class=\"c\">#\u4f55\u3067\u3082\u826f\u3044\u306e\u3067\u6307\u5b9a\u3059\u308b\u3002\u30c7\u30d5\u30a9\u30eb\u30c8\u306e\u307e\u307e\u3067\u3082OK<\/span>\r\n\r\nCA creation <span class=\"nb\">complete <\/span>and you may now import and sign cert requests.\r\nYour new CA certificate file <span class=\"k\">for <\/span>publishing is at:\r\n\/usr\/share\/easy-rsa\/3\/pki\/ca.crt\r\n<\/code><\/pre>\n<p>\u751f\u6210DH\u53c2\u6570\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@hoge 3]# .\/easyrsa gen-dh\r\nUsing SSL: openssl OpenSSL 1.1.1g FIPS  21 Apr 2020\r\nGenerating DH parameters, 2048 bit long safe prime, generator 2\r\nThis is going to take a long <span class=\"nb\">time<\/span>\r\n........................................................................................................+....+\r\nDH parameters of size 2048 created at \/usr\/share\/easy-rsa\/3\/pki\/dh.pem\r\n<\/code><\/pre>\n<p>\u4ece\u521b\u5efa\u670d\u52a1\u5668\u5bc6\u94a5\u5230\u7b7e\u7f72\u8bc1\u4e66\u7684\u8fc7\u7a0b<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@hoge 3]# .\/easyrsa build-server-full server nopass\r\nUsing SSL: openssl OpenSSL 1.1.1g FIPS  21 Apr 2020\r\nGenerating a RSA private key\r\n..................+++++\r\n............................................................................+++++\r\nwriting new private key to <span class=\"s1\">'\/usr\/share\/easy-rsa\/3\/pki\/easy-rsa-36402.InOa0s\/tmp.ILGl7B'<\/span>\r\n<span class=\"nt\">-----<\/span>\r\nUsing configuration from \/usr\/share\/easy-rsa\/3\/pki\/easy-rsa-36402.InOa0s\/tmp.omwcm1\r\nEnter pass phrase <span class=\"k\">for<\/span> \/usr\/share\/easy-rsa\/3\/pki\/private\/ca.key: <span class=\"c\">#\u8a8d\u8a3c\u5c40\u306e\u4f5c\u6210\u306e\u6642\u306b\u8a2d\u5b9a\u3057\u305f\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b<\/span>\r\nCheck that the request matches the signature\r\nSignature ok\r\nThe Subject<span class=\"s1\">'s Distinguished Name is as follows\r\ncommonName            :ASN.1 12:'<\/span>server<span class=\"s1\">'\r\nCertificate is to be certified until Apr  9 05:25:22 2023 GMT (825 days)\r\n\r\nWrite out database with 1 new entries\r\nData Base Updated\r\n<\/span><\/code><\/pre>\n<p>\u4ece\u5ba2\u6237\u7aef\u751f\u6210\u79c1\u94a5\u5230\u8bc1\u4e66\u7b7e\u540d\uff0c\u901a\u8fc7\u6dfb\u52a0nopass\uff0c\u53ef\u4ee5\u5728VPN\u8fde\u63a5\u65f6\u4e0d\u9700\u8981\u8f93\u5165\u5bc6\u7801\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@hoge 3]# .\/easyrsa build-client-full client0 nopass\r\nUsing SSL: openssl OpenSSL 1.1.1g FIPS  21 Apr 2020\r\nGenerating a RSA private key\r\n........+++++\r\n..........+++++\r\nwriting new private key to <span class=\"s1\">'\/usr\/share\/easy-rsa\/3\/pki\/easy-rsa-36518.woJCtP\/tmp.DYeRlx'<\/span>\r\n<span class=\"nt\">-----<\/span>\r\nUsing configuration from \/usr\/share\/easy-rsa\/3\/pki\/easy-rsa-36518.woJCtP\/tmp.6ttbFr\r\nEnter pass phrase <span class=\"k\">for<\/span> \/usr\/share\/easy-rsa\/3\/pki\/private\/ca.key: <span class=\"c\">#\u8a8d\u8a3c\u5c40\u306e\u4f5c\u6210\u306e\u6642\u306b\u8a2d\u5b9a\u3057\u305f\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b<\/span>\r\nCheck that the request matches the signature\r\nSignature ok\r\nThe Subject<span class=\"s1\">'s Distinguished Name is as follows\r\ncommonName            :ASN.1 12:'<\/span>client0<span class=\"s1\">'\r\nCertificate is to be certified until Apr  9 05:25:48 2023 GMT (825 days)\r\n\r\nWrite out database with 1 new entries\r\nData Base Updated\r\n<\/span><\/code><\/pre>\n<p>\u751f\u6210TLS\u79d8\u94a5<\/p>\n<pre class=\"post-pre\"><code><span class=\"nb\">cd<\/span> \/etc\/openvpn\/server\r\nopenvpn <span class=\"nt\">--genkey<\/span> <span class=\"nt\">--secret<\/span> ta.key\r\n<\/code><\/pre>\n<h2>\u521b\u5efa\u670d\u52a1\u5668\u7aef\u914d\u7f6e\u6587\u4ef6<\/p>\n<p>\u6211\u4f1a\u521b\u5efaOpenVPN\u7684\u914d\u7f6e\u6587\u4ef6\u3002<\/p>\n<pre class=\"post-pre\"><code>vi \/etc\/openvpn\/server\/server.conf\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code>port 1194 <span class=\"c\">#Listen\u3059\u308b\u30dd\u30fc\u30c8<\/span>\r\nproto udp <span class=\"c\">#udp\u3067\u4e0a\u8a18\u30dd\u30fc\u30c8\u3067\u53d7\u3051\u4ed8\u3051\u308b<\/span>\r\ndev tun <span class=\"c\"># \u30b5\u30fc\u30d0\u306eLAN\u5074\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3068VPN\u3067\u30d6\u30ea\u30c3\u30b8\u3059\u308b\u5834\u5408\u306fdev tap\u3092\u4f7f\u3046\u3002 OpenVPN\u30b5\u30fc\u30d0\u3067\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3059\u308b\u5834\u5408\u306ftun\u306b\u3059\u308b<\/span>\r\nca \/usr\/share\/easy-rsa\/3\/pki\/ca.crt <span class=\"c\">#<\/span>\r\ncert \/usr\/share\/easy-rsa\/3\/pki\/issued\/server.crt <span class=\"c\">#\u30b5\u30fc\u30d0\u30fc\u8a3c\u660e\u66f8<\/span>\r\nkey \/usr\/share\/easy-rsa\/3\/pki\/private\/server.key <span class=\"c\">#\u30b5\u30fc\u30d0\u30fc\u79d8\u5bc6\u9375<\/span>\r\ndh \/usr\/share\/easy-rsa\/3\/pki\/dh.pem <span class=\"c\">#DH\u9375<\/span>\r\nserver 10.8.0.0 255.255.255.0 <span class=\"c\">#\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306b\u6255\u3044\u51fa\u3059\u30a2\u30c9\u30ec\u30b9\u5e2f\u3002dev tun\u306b\u3064\u304f\u30a2\u30c9\u30ec\u30b9\u3067\u3082\u3042\u308b\u3002<\/span>\r\nifconfig-pool-persist \/etc\/openvpn\/server\/ipp.txt\r\npush <span class=\"s2\">\"redirect-gateway def1 bypass-dhcp bypass-dns\"<\/span> <span class=\"c\">#\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u5168\u3066\u306e\u901a\u4fe1\u3092OpenVPN\u7d4c\u7531\u306b\u3059\u308b\u3002\u5f8c\u308d\u306ebypass\u306fdhcp\u3068dns\u901a\u4fe1\u306e\u307f\u30ed\u30fc\u30ab\u30eb\u3092\u901a\u3059\u8a2d\u5b9a\u3002\u7279\u306bDHCP\u3092\u4f7f\u3063\u3066\u308b\u74b0\u5883\u3067\u306fbypass-dhcp\u304c\u5fc5\u9808\u3002dns\u3092bypass\u3057\u306a\u3044\u5834\u5408\u306fpush \"dhcp-option DNS 8.8.8.8\"\u3092\u4e0b\u306b\u66f8\u304f<\/span>\r\nclient-to-client <span class=\"c\">#VPN\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u540c\u58eb\u306e\u901a\u4fe1\u3092\u8a31\u53ef<\/span>\r\nkeepalive 10 120 <span class=\"c\">#\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306b10\u79d2\u306b\uff11\u56de\u6b7b\u6d3b\u76e3\u8996\u30d1\u30b1\u30c3\u30c8\u3092\u9001\u4fe1\u3002120\u79d2\u9593\u5e30\u3063\u3066\u3053\u306a\u304b\u3063\u305f\u3089\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304cdown\u3057\u3066\u3044\u308b\u3068\u898b\u306a\u3059<\/span>\r\ntls-auth \/etc\/openvpn\/server\/ta.key 0 <span class=\"c\">#TLS<\/span>\r\ncipher AES-256-CBC\r\npersist-key\r\npersist-tun\r\ncomp-lzo\r\nstatus openvpn-status.log\r\nverb 3\r\nexplicit-exit-notify 1\r\n<\/code><\/pre>\n<h2>\u6253\u5f00OpenVPN<\/p>\n<p>\u670d\u52a1\u5668\u4e0a\u7684\u5730\u65b9\u662f\u914d\u7f6e\u6587\u4ef6\u540d\u3002\uff08\/etc\/openvpn\/server\/server.conf\uff09<\/p>\n<pre class=\"post-pre\"><code>systemctl <span class=\"nb\">enable <\/span>openvpn-server@server.service\r\nsystemctl start openvpn-server@server.service\r\n<\/code><\/pre>\n<h2>\u9632\u706b\u5899\u7684\u8bbe\u7f6e<\/p>\n<p>\u8fdb\u884c\u5141\u8bb8 OpenVPN \u7684\u8bbe\u7f6e\u3002<br \/>\n\u7531\u4e8e conoha \u7684 VPS \u91c7\u7528 eth0 \u5177\u6709\u5168\u7403 IP\uff0c\u56e0\u6b64\u5c06 eth0 \u8bbe\u7f6e\u4e3a\u5916\u90e8\u3002<br \/>\n\u203b \u5c06\u533a\u57df\u8bbe\u7f6e\u4e3a\u5916\u90e8\u65f6\uff0c\u5c06\u9ed8\u8ba4\u8fdb\u884c\u7f51\u7edc\u5730\u5740\u8f6c\u6362\u3002<\/p>\n<pre class=\"post-pre\"><code>nmcli connection modify eth0 connection.zone external\r\nnmcli connection modify tun0 connection.zone trusted\r\n\r\nfirewall-cmd <span class=\"nt\">--zone<\/span><span class=\"o\">=<\/span>external <span class=\"nt\">--add-service<\/span><span class=\"o\">=<\/span>openvpn <span class=\"nt\">--permanent<\/span>\r\nfirewall-cmd <span class=\"nt\">--reload<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@hoge ~]# firewall-cmd <span class=\"nt\">--list-all<\/span> <span class=\"nt\">--zone<\/span><span class=\"o\">=<\/span>external\r\nexternal <span class=\"o\">(<\/span>active<span class=\"o\">)<\/span>\r\n  target: default\r\n  icmp-block-inversion: no\r\n  interfaces: eth0\r\n  sources:\r\n  services: openvpn ssh\r\n  ports:\r\n  protocols:\r\n  masquerade: <span class=\"nb\">yes\r\n  <\/span>forward-ports:\r\n  source-ports:\r\n  icmp-blocks:\r\n  rich rules:\r\n<\/code><\/pre>\n<h1>\u5ba2\u6237\u7aef\u7684\u8bbe\u7f6e\uff08MacBook\uff09<\/p>\n<h2>\u5728SCP\u4e0a\u4e0b\u8f7d\u8bc1\u4e66\u3002<\/p>\n<p>\u5c06\u521a\u521a\u521b\u5efa\u7684\u8bc1\u4e66\u4e0b\u8f7d\u5230MacBook\u7684\u4efb\u610f\u76ee\u5f55\u4e2d\u3002<\/p>\n<pre class=\"post-pre\"><code>scp <span class=\"nt\">-i<\/span> ~\/.ssh\/test.pem root@XXX.XXX.XXX.XXX:\/usr\/share\/easy-rsa\/3\/pki\/ca.crt .\/\r\nscp <span class=\"nt\">-i<\/span> ~\/.ssh\/test.pem root@XXX.XXX.XXX.XXX:\/usr\/share\/easy-rsa\/3\/pki\/issued\/client0.crt .\/\r\nscp <span class=\"nt\">-i<\/span> ~\/.ssh\/test.pem root@XXX.XXX.XXX.XXX:\/usr\/share\/easy-rsa\/3\/pki\/private\/client0.key .\/\r\nscp <span class=\"nt\">-i<\/span> ~\/.ssh\/test.pem root@XXX.XXX.XXX.XXX:\/etc\/openvpn\/server\/ta.key .\/\r\n<\/code><\/pre>\n<h2>\u521b\u5efa\u5ba2\u6237\u7aef\u914d\u7f6e\u6587\u4ef6<\/p>\n<p>\u4e0b\u8f7d\u5e76\u542f\u52a8Tunnelblick<br \/>\nhttps:\/\/tunnelblick.net\/<\/p>\n<p>\u7528\u6587\u672c\u521b\u5efa\u8bbe\u7f6e\u6587\u4ef6\u3002<\/p>\n<pre class=\"post-pre\"><code>client\r\ndev tun\r\nproto udp\r\nremote XXX.XXX.XXX.XXX 1194 <span class=\"c\">#\u63a5\u7d9a\u5148\u3068\u30dd\u30fc\u30c8<\/span>\r\nresolv-retry infinite\r\nnobind\r\npersist-key\r\npersist-tun\r\nca \/Users\/hoge\/workspace\/openvpn\/ca.crt <span class=\"c\">#scp\u3067\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305f\u3082\u306e<\/span>\r\ncert \/Users\/hoge\/workspace\/openvpn\/client0.crt <span class=\"c\">#scp\u3067\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305f\u3082\u306e<\/span>\r\nkey \/Users\/hoge\/workspace\/openvpn\/client0.key <span class=\"c\">#scp\u3067\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305f\u3082\u306e<\/span>\r\ntls-auth \/Users\/hoge\/workspace\/openvpn\/ta.key 1 <span class=\"c\">#scp\u3067\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305f\u3082\u306e<\/span>\r\ncipher AES-256-CBC\r\ncomp-lzo\r\nverb 3\r\n<\/code><\/pre>\n<h2>\u786e\u8ba4\u5df2\u8fde\u63a5\u6210\u529f<\/p>\n<p>\u6267\u884ccurl\u547d\u4ee4\uff0c\u5982\u679c\u54cd\u5e94\u7ed3\u679c\u662fVPN\u670d\u52a1\u5668\u7684\u5168\u7403IP\uff0c\u5219\u8bf4\u660e\u8fde\u63a5\u6210\u529f\u3002<\/p>\n<pre class=\"post-pre\"><code>% curl ipinfo.io\/ip\/\r\nXXX.XXX.XXX.XXX\r\n<\/code><\/pre>\n<h3>\u5f53\u6709\u65e0\u6cd5\u6d4f\u89c8\u7684\u7f51\u7ad9\u8fde\u63a5\u65f6<\/p>\n<p>\u8bf7\u5c1d\u8bd5\u5728\u670d\u52a1\u5668\u548c\u5ba2\u6237\u7aef\u4e0a\u6dfb\u52a0MTU\u6216MSS\u7684\u8bbe\u7f6e\u3002<br \/>\ntun\u63a5\u53e3\u7684\u9ed8\u8ba4MTU\u4e3a1500\u3002<\/p>\n<pre class=\"post-pre\"><code>mssfix XXXX\r\ntun-mtu XXXX\r\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>\u8d77\u521d\/\u9996\u5148\/\u9996\u5148\u5148\u63d0\u5230 \u6211\u60f3\u4f7f\u7528\u56fa\u5b9aIP\uff0c\u4f46\u4e0d\u60f3\u4f7f\u7528\u4efb\u4f55\u670d\u52a1\uff0c\u800c\u662f\u81ea\u5df1\u521b\u5efa\u3002\u56e0\u6b64\uff0c\u6211\u642d\u5efa\u4e86\u4e00\u4e2aVPN\u670d\u52a1\u5668\u3002\u8bf4 [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[227],"class_list":["post-27502","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-227"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u4f7f\u7528CentOS8\u7684OpenVPN - Blog - Silicon Cloud<\/title>\n<meta name=\"description\" content=\"\u5173\u4e8e\u4f7f\u7528CentOS8\u7684OpenVPN\u7684\u6280\u672f\u6587\u7ae0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528centos8\u7684openvpn-2\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528CentOS8\u7684OpenVPN\" \/>\n<meta property=\"og:description\" content=\"\u5173\u4e8e\u4f7f\u7528CentOS8\u7684OpenVPN\u7684\u6280\u672f\u6587\u7ae0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528centos8\u7684openvpn-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-10-21T08:10:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-11T19:03:57+00:00\" \/>\n<meta name=\"author\" content=\"\u96c5, \u609f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u96c5, \u609f\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/\",\"name\":\"\u4f7f\u7528CentOS8\u7684OpenVPN - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-10-21T08:10:22+00:00\",\"dateModified\":\"2025-08-11T19:03:57+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6\"},\"description\":\"\u5173\u4e8e\u4f7f\u7528CentOS8\u7684OpenVPN\u7684\u6280\u672f\u6587\u7ae0\",\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528CentOS8\u7684OpenVPN\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6\",\"name\":\"\u96c5, \u609f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g\",\"caption\":\"\u96c5, \u609f\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/yawu\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528CentOS8\u7684OpenVPN - Blog - Silicon Cloud","description":"\u5173\u4e8e\u4f7f\u7528CentOS8\u7684OpenVPN\u7684\u6280\u672f\u6587\u7ae0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528centos8\u7684openvpn-2\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4f7f\u7528CentOS8\u7684OpenVPN","og_description":"\u5173\u4e8e\u4f7f\u7528CentOS8\u7684OpenVPN\u7684\u6280\u672f\u6587\u7ae0","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528centos8\u7684openvpn-2\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-10-21T08:10:22+00:00","article_modified_time":"2025-08-11T19:03:57+00:00","author":"\u96c5, \u609f","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u96c5, \u609f","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"1 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/","name":"\u4f7f\u7528CentOS8\u7684OpenVPN - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-10-21T08:10:22+00:00","dateModified":"2025-08-11T19:03:57+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6"},"description":"\u5173\u4e8e\u4f7f\u7528CentOS8\u7684OpenVPN\u7684\u6280\u672f\u6587\u7ae0","breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528CentOS8\u7684OpenVPN"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6","name":"\u96c5, \u609f","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g","caption":"\u96c5, \u609f"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/yawu\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8centos8%e7%9a%84openvpn-2\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/27502","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=27502"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/27502\/revisions"}],"predecessor-version":[{"id":111136,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/27502\/revisions\/111136"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=27502"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=27502"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=27502"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}