[Feature request] Add VPN egress about homelab

[umbertix]

Thanks for the pointers, I ended up having a container running next to the one's that needed VPN connectivity with something like:

        - name: gluetun
          image: ghcr.io/qdm12/gluetun # Optionally you can use the "qmcgaw/gluetun" image as well as specify what version of Gluetun you desire
          imagePullPolicy: Always
          securityContext:
            capabilities:
              add: ["NET_ADMIN"]

Thanks, I'll see if at some point I can get a PR for this :)

[khuedoan]

Hi, I haven't tried it yet, but this sounds like it could be done by setting up a Cilium egress gateway and a VPN sidecar?

Also if you only need to set it up for Transmission to download totally legal content (like Big Buck Bunny 😉), perhaps a VPN sidecar for it would be simpler than an egress gateway 🤔

[pandabear41]

The egress gateway or any other method only makes sense if you have multiple pods needing VPN.

I tried to play with Cilium egress gateway, but with my lack of cilium knowledge I couldn't get working.

To my understanding the egress gateway directs pod traffic to a specific node's host network interface/IP (which is intended to route legacy services into the cluster). I couldn't get it to link back into Cilium and to a cluster IP. If you can figure it out that would be wonderful.
It would work if you had a VPN interface running on the host of one node (not in the kubernetes cluster) or a VPN client on a router or another device.

Alternatively you can run gluetun with a socks5-server sidecar. Connect that up to any clients (torrent or prowlarr).