Debian – How to setup a traffic limit per user on OpenVPN

debianlimitsnetwork-trafficopenvpntraffic-management

I am setting up a VPN server using OpenVPN. The authentication method is the certificate one (different certs for client and server). The VPS has 1TB of traffic monthly.

I plan allowing up to 4 clients per one server. So I'd like to restrict the client using more than 250GB per month.

I thought I might have restricted the amount of traffic coming from one IP, but this idea wouldn't solve the problem – clients may login from either their phone, PC, or tablet.

Ideally, I expect a statement in the .ovpn client file which would be able to control the amount of traffic coming from one client. I haven't found it, though.

How to setup the restriction? Thanks.

Best Answer

I'm a bit late to the party, but you can use the client-config-dir option to assign each client conf a local IP address. Then you can use Linux's Traffic Control (tc) to limit the bandwidth for each IP (and thus for each client). Would that work for you ?

Related Solutions

Linux – how can I limit per user bandwidth

Just to add on the above question.

You could use iptables with user matching to color the packets like so:

iptables -t mangle -A OUTPUT -p tcp -m owner --uid-owner someuser -j MARK --set-mark 100

And then use 'tc' to limit on a per user basis.

Iptables – Openvpn – enabled traffic forwarding but want to restrict it

i would do it just based on source ip [ in this example i assume vpn users have addreses from 10.0.15.0/24 ]:

iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -s 10.0.15.0/24 -p tcp --dport 80 --j ACCEPT
iptables -A FORWARD -s 10.0.15.0/24 -p icmp --j ACCEPT
iptables -A FORWARD -s 10.0.15.0/24 --j DROP

do remember that smarter users might tunnel unwanted traffic over http/https

Best Answer

Related Solutions

Linux – how can I limit per user bandwidth

Iptables – Openvpn – enabled traffic forwarding but want to restrict it

Related Topic