antoinemary / docker-softether-vpn-server

A lightweight Softether VPN Server docker container running on Alpine

Lightweight Softether VPN Server

This docker only contains a working SoftEther VPN Server other components have been removed.

If you need other parts :

• SoftEther VPN Bridge
• SoftEther VPN Client
• SoftEther VPN CMD

---

What is SoftEther VPN Server

SoftEther VPN ("SoftEther" means "Software Ethernet") is one of the world's most powerful and easy-to-use multi-protocol VPN software. It runs on Windows, Linux, Mac, FreeBSD and Solaris.

SoftEther VPN is open source. You can use SoftEther for any personal or commercial use for free charge.

SoftEther VPN is an optimum alternative to OpenVPN and Microsoft's VPN servers. SoftEther VPN has a clone-function of OpenVPN Server. You can integrate from OpenVPN to SoftEther VPN smoothly. SoftEther VPN is faster than OpenVPN. SoftEther VPN also supports Microsoft SSTP VPN for Windows Vista / 7 / 8. No more need to pay expensive charges for Windows Server license for Remote-Access VPN function.

SoftEther VPN can be used to realize BYOD (Bring your own device) on your business. If you have smartphones, tablets or laptop PCs, SoftEther VPN's L2TP/IPsec server function will help you to establish a remote-access VPN from your local network. SoftEther VPN's L2TP VPN Server has strong compatible with Windows, Mac, iOS and Android.

https://www.softether.org/

About this image

Versions will follow Softether VPN Github Repository tags and Alpine update.

This image is make'd from the offical Softether VPN Github Repository with 2 patchs :

1. Server Patch:

• Default Server cipher changed from "RC4-MD5" to "DHE-RSA-AES256-SHA"
• Default HUB name changed from "DEFAULT" to "HUB"
• OpenVPN Patch:
  • Default OpenVPN cipher changed from "AES-128-CBC" to "AES-256-CBC"
  • Default OpenVPN auth changed from "SHA1" to "RMD160"
  • Client string option edited according to modification

Nothing else have been edited. So when you will start it the first time you will get the default configuration which is :

• */!\ Administration without any password /!*
• Server listenning on 443/tcp, 992/tcp, 1194/tcp+udp, tcp/5555
• A Virtual hub named "HUB" Without any user and SecureNAT off
• Connection on 443/tcp, 992/tcp, 1194/tcp, 5555/tcp with Softether VPN Protocol
• Connection on 1194/udp, 443/tcp, 992/tcp, 1194/tcp, 5555/tcp with OpenVPN Protocol
• MS-SSTP Connection
• Dynamic DNS

You will have to configure it. To do so use :

• SoftEther VPN CMD (any platform - Console)
• SoftEther VPN Server Manager (Windows, Mac OS X - GUI)
• Edit by hand /usr/vpnserver/vpn_server.config then restart the server (Not Recommended)

How to use this image

For a simple use without persistence :

docker run -d --cap-add NET_ADMIN --name softether-vpn-server -p 443:443/tcp -p 992:992/tcp -p 1194:1194/udp -p 5555:5555/tcp amary/softether-vpn-server

For a simple use with persistence (will give you access to configuration and logs) :

docker run -d --cap-add NET_ADMIN --name softether-vpn-server -p 443:443/tcp -p 992:992/tcp -p 1194:1194/udp -p 5555:5555/tcp -v $(pwd)/softether/config:/etc/vpnserver:Z -v $(pwd)/softether/logs:/var/log/vpnserver:Z amary/softether-vpn-server

Add/delete any -p $PORT:$PORT/{tcp,udp} depending on you will

Changelog

• v4.22-9634-beta : Initial Release
• v4.22-9634-beta.patch1 : Update Alpine to 3.6, Improve Dockerfile, Secure Entrypoint
• v4.22-9634-beta.patch2 : Fix mounting issues, update Readme

docker-softether-vpn-server's Issues

Configuration is lost every once a while

I successfully deployed this image to my Azure cloud, can connect to it using softether-client after configuration. But the container will lose all configuration or reset after a while. I have to reconfigure it in order to use it again.

Add L2TP ports to EXPOSE directive

L2TP is using port 1701/udp, 500/udp, 4500/udp.
Please consider add this into your Dockerfile.

New SoftEther release

There's a new SoftEther release out, so this container needs to be rebuilt.
In addition to that, there's a new repo, SoftEtherVPN_Stable, which should just be able to be cloned from every time for a stable release.

Persistent configuration doesn't initialize File permissions error

When I try to use the persistent config setup, I get the following error:

Failed to set capabilities on file `/usr/vpnserver/vpnserver' (No such file or directory)
usage: setcap [-q] [-v] (-r|-|) [ ... (-r|-|) ]

Note must be a regular (non-symlink) file.

When I do a permission check, I noticed the folder permissions are as follows:

drwxr-xr-x 2 1000 systemd-journal

This is on an Ubuntu 16.04 setup running on a VPS. It's not clear what permissions should be set on the folder to allow the build to setup the config files and logs.

I've tried to manually create the vpnserver file in that folder, but it results in a permissions error.

Update Alpine to 3.6

persistence not work

the config folder on the local filesystem is empty. I start the docker container as you explained.
docker run -d --cap-add NET_ADMIN --name softether-vpn-server -p 443:443/tcp -v $(pwd)/config:/etc/vpnserver:Z -v $(pwd)/logs:/var/log/vpnserver:Z

RMD160 not found

Fri Aug 23 11:01:37 2019 MANAGEMENT: CMD 'username "Auth" "test"'
Fri Aug 23 11:01:37 2019 MANAGEMENT: CMD 'password [...]'
Fri Aug 23 11:01:37 2019 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Aug 23 11:01:37 2019 MANAGEMENT: Client disconnected
Fri Aug 23 11:01:37 2019 Message hash algorithm 'RMD160' not found
Fri Aug 23 11:01:37 2019 Exiting due to fatal error

Everything else works, but OpenVPN couldn't connect due to RMD160 not found. Can you provide a fix?