https://github.com/ali-master/docker-anyconnect-squid-proxy
Provide an HTTP proxy that provides connectivity via an OpenConnect VPN client (to connect to a compatible AnyConnect VPN server) in a Docker container
https://github.com/ali-master/docker-anyconnect-squid-proxy
anyconnect docker docker-anyconnect-squid proxy-server squid-proxy
Last synced: 4 months ago
JSON representation
Provide an HTTP proxy that provides connectivity via an OpenConnect VPN client (to connect to a compatible AnyConnect VPN server) in a Docker container
- Host: GitHub
- URL: https://github.com/ali-master/docker-anyconnect-squid-proxy
- Owner: ali-master
- License: mit
- Created: 2023-07-14T10:18:21.000Z (almost 2 years ago)
- Default Branch: master
- Last Pushed: 2023-07-15T18:41:11.000Z (almost 2 years ago)
- Last Synced: 2024-12-04T23:05:31.789Z (6 months ago)
- Topics: anyconnect, docker, docker-anyconnect-squid, proxy-server, squid-proxy
- Language: Shell
- Homepage: https://hub.docker.com/r/alimaster/openconnect-squid-proxy
- Size: 47.9 KB
- Stars: 3
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# openconnect + squid proxy
This Docker image contains an [openconnect client](http://www.infradead.org/openconnect/) (version 8.04 with pulse/juniper support) and the [squid proxy server](https://ubuntu.com/server/docs/proxy-servers-squid) for http/https connections.
# Requirements
If you don't want to set the environment variables on the command line
set the environment variables in a `.env` file:
```env
OPENCONNECT_URL=
OPENCONNECT_USER=
OPENCONNECT_PASSWORD=
OPENCONNECT_OPTIONS=--authgroup \
--servercert --protocol= \
--reconnect-timeout 86400
```
_Don't use quotes around the values!_
See the [openconnect documentation](https://www.infradead.org/openconnect/manual.html) for available options.
Either set the password in the `.env` file or leave the variable `OPENCONNECT_PASSWORD` unset, so you get prompted when starting up the container.
Optionally set a multi factor authentication code:
```env
OPENCONNECT_MFA_CODE=
```
# Run container in foreground
To start the container in foreground run:
```bash
docker run -it --rm --privileged --env-file=.env \
-p 3306:3306 -p 8889:8889 alimaster/openconnect-squid-proxy:latest
```
The proxies are listening on ports 3306 (http/https). Either use `--net host` or `-p :3306 -p :8889` to make the proxy ports available on the host.
Without using a `.env` file set the environment variables on the command line with the docker run option `-e`:
```bash
docker run … -e OPENCONNECT_URL=vpn.gateway.com/example \
-e OPENCONNECT_OPTIONS='' \
-e OPENCONNECT_USER= …
```
# Run container in background
To start the container in daemon mode (background) set the `-d` option:
```bash
docker run -d -it --rm …
```
In daemon mode you can view the stderr log with `docker logs`:
```bash
docker logs `docker ps | grep "alimaster/openconnect-squid-proxy" | awk -F' ' '{print $1}'`
```
# Use container with docker-compose
```yml
version: '3.2'
services:
vpn:
container_name: vpn
image: alimaster/openconnect-squid-proxy:latest
ports:
- 0.0.0.0:3306:3306
privileged: true
env_file:
- .env
cap_add:
- NET_ADMIN
```
Set the environment variables for _openconnect_ in the `.env` file again (or specify another file) and
map the configured ports in the container to your local ports if you want to access the VPN
on the host too when running your containers. Otherwise only the docker containers in the same
network have access to the proxy ports.
# Route traffic through VPN container
Let's say you have a `vpn` container defined as above, then add `network_mode` option to your other containers:
```yml
depends_on:
- vpn
network_mode: "service:vpn"
```
Keep in mind that `networks`, `extra_hosts`, etc. and `network_mode` are mutually exclusive!
# Configure proxy
The container is connected via _openconnect_ and now you can configure your browser
and other software to use one of the proxies (3306 for http/https).
For example FoxyProxy (available for Firefox, Chrome) is a suitable browser extension.
You may also set environment variables:
```bash
export http_proxy="http://127.0.0.1:3306/"
export https_proxy="http://127.0.0.1:3306/"
```
composer, git (if you don't use the git+ssh protocol, see below) and others use these.
# Build
You can build the container yourself with
```bash
docker build -f build/Dockerfile -t alimaster/openconnect-squid-proxy:custom ./build
```