UbuntuSoftware-Defined

Personal Vpn Router

Route all traffic through an encrypted IPsec tunnel with IKEv2 for mobile and laptop clients

Back to Software-Defined

Route all traffic through an encrypted IPsec tunnel with IKEv2 for mobile and laptop clients. Personal VPN concentrator with IKEv2 for mobile and laptop clients, local DNS resolution via dnsmasq, and NAT masquerading for full-tunnel routing. Built on ubuntu-24.04 with 4 pre-configured features including ssh, headless, vpn-strongswan.

Use Case

Self-hosted VPN server for a homelab or small VPS — a single user or household connects phones, laptops, and tablets via IKEv2/IPsec, routing all internet traffic through the server for privacy, ad-blocking via local DNS, and secure access to the home network while traveling

Description

Personal VPN router built on StrongSwan IPsec that acts as a Vyatta-style software router, tunneling all client traffic through an encrypted IKEv2 connection — ideal for privacy-conscious users who want full control over their VPN infrastructure instead of trusting a third-party provider

Network Architecture

Public Internetnot deployedVPN Server (deployed image)Client Devicesnot deployedNATRouted trafficFiltered DNSIPsec tunnelIPsec tunnelIPsec tunnelInternet</>Websites / APIsiptables NATStrongSwanIKEv2/IPsecdnsmasqDNS + Ad-blockPhoneLaptopTabletDataVPN TunnelDNSDeployedExternal

Features

  • ssh
  • headless
  • vpn-strongswan
  • monitoring

OS Details

Base Imageubuntu-24.04
Packages11
Servicesssh
Security Levelstandard

Hardware Requirements

Architecturex86_64
Memory2 GB
Storage16 GB
Not built yetCustomize