Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/qwj/python-vpn

VPN Server implemented in pure Python. (For Research Purposes Only)
https://github.com/qwj/python-vpn

esp ike ikev1 ikev2 ipsec lightweight psk python tunnel vpn wireguard

Last synced: 3 days ago
JSON representation

VPN Server implemented in pure Python. (For Research Purposes Only)

Host: GitHub
URL: https://github.com/qwj/python-vpn
Owner: qwj
License: mit
Created: 2018-12-25T12:06:59.000Z (about 6 years ago)
Default Branch: master
Last Pushed: 2023-04-23T13:53:24.000Z (almost 2 years ago)
Last Synced: 2024-07-30T05:18:29.687Z (6 months ago)
Topics: esp, ike, ikev1, ikev2, ipsec, lightweight, psk, python, tunnel, vpn, wireguard
Language: Python
Homepage:
Size: 127 KB
Stars: 342
Watchers: 6
Forks: 97
Open Issues: 10
Metadata Files:
- Readme: README.rst
- License: LICENSE

Awesome Lists containing this project

README

        python-vpn

============

|made-with-python| |PyPI-version| |Hit-Count| |Downloads| |Downloads-month| |Downloads-week|

.. |made-with-python| image:: https://img.shields.io/badge/Made%20with-Python-1f425f.svg

   :target: https://www.python.org/

.. |PyPI-version| image:: https://badge.fury.io/py/pvpn.svg

   :target: https://pypi.python.org/pypi/pvpn/

.. |Hit-Count| image:: http://hits.dwyl.io/qwj/python-vpn.svg

   :target: https://pypi.python.org/pypi/pvpn/

.. |Downloads| image:: https://pepy.tech/badge/pvpn

   :target: https://pepy.tech/project/pvpn

.. |Downloads-month| image:: https://pepy.tech/badge/pvpn/month

   :target: https://pepy.tech/project/pvpn

.. |Downloads-week| image:: https://pepy.tech/badge/pvpn/week

   :target: https://pepy.tech/project/pvpn

VPN Server implemented in pure Python. **(For Research Purposes Only)**

Introduction

------------

All VPN softwares are stupid, clumsy and hard to configure. So comes **python-vpn**.

- NO app install needed

- NO server configuration file

- NO network interface added

- NO iptables or "/etc" modified

Press "RETURN" to start, "CTRL+C" to stop.

QuickStart

----------

.. code:: rst

  $ pip3 install pvpn

  Successfully installed pvpn-0.2.1

  $ pvpn -p yourpassword

  Serving on UDP :500 :4500...

  ^C

  $ pvpn -wg 9000

  Serving on UDP :500 :4500...

  Serving on UDP :9000 (WIREGUARD)...

  ^C

Open server's UDP port :500 :4500 to your device. In device's system setting, add an "IPSec" (iOS) or "IPSec IKE PSK" (Android) node, write down the server address and password "yourpassword". Connect.

If you prefer wireguard VPN, specify "-wg (port)" parameter and open server's (port) UDP port to your device. Paste the printed server public key to wireguard client settings, write down the server address:port. Connect.

You should modify the default password "test" with a good one. See "pvpn -h" for more options.

Features

--------

- Clean, lightweight

- IKEv1, IKEv2, L2TP auto-detection

- WireGuard

- TCP stack

- TCP/UDP tunnel

- DNS cache

Protocols

---------

+-------------------+----------------+-------------------+----------------+------------------+

| Protocol Name     | Name in iOS    | Name in Android   | Name in MacOS  | Name in Windows  |

+===================+================+===================+================+==================+

| L2TP PSK ✔        | L2TP           | "L2TP/IPSec PSK"  | L2TP/IPSec     | L2TP             |

+-------------------+----------------+-------------------+----------------+------------------+

| IKEv1 PSK ✔       | IPsec **[1]**  | "IPSec Xauth PSK" | Cisco IPSec    | IPSec            |

+-------------------+----------------+-------------------+----------------+------------------+

| IKEv2 PSK ✔       | IKEv2 **[2]**  | "IPSec IKEv2 PSK" | IKEv2          | IKEv2            |

+-------------------+----------------+-------------------+----------------+------------------+

| WireGuard ✔       | WireGuard App **[3]**                                                  |

+-------------------+----------------+-------------------+----------------+------------------+

| **[1]** Do not use certificates

| **[2]** Turn off "user authentication"

| **[3]** Turn off "preshared key"

Examples

--------

- TCP Tunnel

  .. code:: rst

    If the remote host match in file "rules.country", tunnel through http proxy.

    $ pvpn -r http://remote_server:port?rules.country

- UDP Tunnel

  .. code:: rst

    Redirect all DNS requests to 8.8.8.8.

    $ pvpn -ur tunnel://8.8.8.8:53?{53}

Specifications

--------------

IPSec/ESP

+ `RFC2406 `_ IP Encapsulating Security Payload (ESP)

+ `RFC3947 `_  Negotiation of NAT-Traversal in the IKE

+ `RFC3948 `_ UDP Encapsulation of IPsec ESP Packets

IKE/ISAKMP

+ `RFC2407 `_ The Internet IP Security Domain of Interpretation for ISAKMP

+ `RFC2408 `_ Internet Security Association and Key Management Protocol (ISAKMP)

+ `RFC2409 `_ The Internet Key Exchange (IKE)

+ `IANA_01 `_ Internet Key Exchange (IKE) Attributes

+ `IANA_02 `_ "Magic Numbers" for ISAKMP Protocol

+ `DRAFT_1 `_ The ISAKMP Configuration Method

+ `DRAFT_2 `_ Extended Authentication within IKE (XAUTH)

IKEv2

+ `RFC7296 `_ Internet Key Exchange Protocol Version 2 (IKEv2)

+ `IANA_03 `_ Internet Key Exchange Version 2 (IKEv2) Parameters

+ `RFC3748 `_ Extensible Authentication Protocol (EAP)

+ `RFC5106 `_ The Extensible Authentication Protocol-Internet Key Exchange Protocol version 2 (EAP-IKEv2) Method

Diffie Hellman

+ `RFC3526 `_ More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE)

+ `RFC5903 `_ Elliptic Curve Groups modulo a Prime (ECP Groups) for IKE and IKEv2

+ `RFC5114 `_ Additional Diffie-Hellman Groups for Use with IETF Standards

L2TP

+ `RFC2661 `_ Layer Two Tunneling Protocol "L2TP"

+ `RFC3193 `_ Securing L2TP using IPsec

+ `RFC1549 `_ PPP in HDLC Framing

+ `RFC1661 `_ The Point-to-Point Protocol (PPP)

+ `RFC1332 `_ The PPP Internet Protocol Control Protocol (IPCP)

WireGuard

+ `RFC7748 `_ Elliptic Curves for Security

+ `WireGuard `_ Protocol Specification