Pi Hosted: How to Route Docker and Desktop Traffic Through a VPN Container

TL;DR

Route Docker containers and supported desktop applications through a VPN by deploying Gluetun as a custom Portainer template, then linking applications such as Deluge or a SOCKS5-compatible browser to it. The setup requires provider credentials, a VPN region such as US New York City, the correct configuration volume, and careful handling of Deluge’s 8112 web UI port. Read on for the specific deployment sequence and settings.

Transcript

hey guys what's going on it's don here from nova spare tech and welcome back to your channel and today i'm gonna be showing you guys another pie hostess series which is forwarding all your container traffic or even your desktop through a vpn so let's get started now if you guys are new to the pi hostess series i will be leaving a playlist of all th... Read More

Key Insights

• 🛃 Creating a custom template in Portainer streamlines the process of deploying VPN connections across various applications.
• 🔒 Using a respected VPN service, such as Private Internet Access, adds essential security layers to your online activities and data management.
• 🚙 Understanding network port management is crucial to prevent conflicts and ensure traffic is directed through the desired containers effectively.
• 👋 Deploying applications like Deluge through a VPN requires specific adjustments to maintain the connection without disruption, showcasing best practices in network configurations.
• 👻 The ability to manipulate and rebalance settings in Portainer allows users to customize their VPN strategy based on their requirements.
• 🤩 A functional SOCKS5 proxy setup is key for routing all desktop application traffic through the VPN, enhancing privacy without sacrificing performance.
• 🧑‍💻 Engaging with the online community through sharing container setups fosters a collaborative environment for improving personal tech setups.

Questions & Answers

Q: How do you route Docker container traffic through a VPN in Pi Hosted?

Create and deploy a custom Gluetun VPN template in Portainer using the appropriate provider, username, password, region, and configuration volume. Once Gluetun is running, deploy applications such as Deluge and configure their traffic to pass through that VPN container.

Q: How do you create a reusable Gluetun template in Portainer?

Open Custom Templates in Portainer, choose Add Custom Template, name it Gluetun, and paste in the compose configuration. Modify the volume and VPN provider settings, then create the template so it can be reused for later deployments.

Q: What configuration volume does the Pi Hosted Gluetun template use?

The demonstrated Pi Hosted setup changes the volume to /portainer/Files/AppData/Config/Gluetun. This places Gluetun’s configuration in the directory structure used throughout the Portainer series.

Q: Which VPN providers can the Gluetun client connect to?

The presenter uses Private Internet Access and also mentions Mullvad, IPVanish, and Nord as examples of supported services. Provider settings differ, so the compose configuration must be adjusted for the service being used.

Q: How do you select a VPN region for Gluetun?

Check Gluetun’s provider information for the available region names, then enter the desired value in the template. The demonstration selects US New York City, while noting that users can instead choose locations in areas such as Europe.

Q: How can Deluge traffic be passed through the VPN container?

After confirming that the Gluetun stack is running, deploy the regular Deluge container from Portainer’s app templates. Its networking and exposed ports must then be adjusted so its traffic can pass through the VPN container.

Q: Which Deluge ports need attention during the setup?

The Deluge container initially exposes two ports in the demonstration. Port 6881 is described as less important for this step, while port 8112 is the essential web UI port that must remain accessible through the configuration.

Q: How can desktop or browser traffic use the same VPN connection?

Deploy a SOCKS5 proxy connected to the Gluetun VPN container, then configure a compatible desktop application or browser to use that proxy. This allows one VPN account to serve multiple applications that support SOCKS5, or potentially the entire computer.

Summary & Key Takeaways

• The video explains how to set up a VPN client in Portainer to forward container and desktop traffic securely, using VPN services like Private Internet Access.

• Viewers are guided on creating a custom template for connecting to VPNs, configuring necessary settings, and deploying applications like Deluge while maintaining the VPN connection.

• Additional features are demonstrated, such as using a SOCKS5 proxy to enable VPN access for desktop applications, allowing a secure browsing experience across all network traffic.