⛅ Sync 2026-10-11 13:16:00

2026-11-15 21:13:00 +08:00 · 2026-10-11 13:16:00 +08:00
1 parent 705dadd362
commit e6d1b4e2d7
@@ -0,0 +1,114 @@
+# luci-app-openvpn-plus
+
+Modern and easy web interface to configure OpenVPN servers and clients on OpenWrt.
+
+## Description
+
+This package provides a modern, all-in-one web interface to configure OpenVPN servers and clients quickly. Featuring a built-in key generator, setup wizard, smart firewall protection, DDNS, SSL-VPN, and profile import/export via QR-code, your VPN is ready to use immediately.
+
+Thanks to this simple application, **anyone can build a professional SSL/TLS-VPN network now**. You do not need to understand complex crypto keys or write config files. The app does all the hard background work for you. With the step-by-step wizard, you can create secure VPN connections for travel and mobile devices in seconds.
+
+Setting up your mobile phone is incredibly easy—just scan the secure QR-code on your screen with your smartphone camera. In the past, running a VPN behind internet provider modems was very complex. To fix this, the app includes smart Double-NAT detection and automated live port checking. This makes the installation completely effortless and brings professional, enterprise-grade VPN features straight to standard OpenWrt routers.
+
+**High Performance for Affordable Hardware:** You don't need expensive enterprise equipment. Thanks to native **OpenVPN Data Channel Offload (DCO)** integration and our automatic MTU engine, the app achieves outstanding throughput rates—matching the speed of Wireguard even on budget-friendly wireless access points.
+
+## 📊 Real-World Performance Benchmarks (iperf3)
+
+We tested the real-world performance of `luci-app-openvpn-plus` using two affordable **Zyxel NWA50AX Pro** wireless access points. Both devices run as pure APs behind standard internet provider modems.
+
+Even though the traffic has to pass through **Double-NAT** and simple port forwardings, the performance matches expensive enterprise hardware:
+
+### 🔹 Test A: Site-to-Site Tunnel (UDP Mode)
+- **Setup:** Zyxel AP ↔️ WAN Router ↔️ Internet ↔️ WAN Router ↔️ Zyxel AP
+- **Network Status:** Both routers are behind Double-NAT.
+- **Benchmark Result:** **450+ Mbit/s** 🚀
+- *The crypto load is perfectly split across multiple CPU cores thanks to OpenVPN DCO and our automatic MTU engine.*
+
+### 🔸 Test B: Mobile Client / Roadwarrior (TCP / SSL-VPN Mode)
+- **Setup:** Zyxel AP ↔️ WAN Router ↔️ Internet ↔️ Smartphone with OpenVPN App
+- **Network Status:** The server AP is behind Double-NAT
+- **Benchmark Result:** **200+ Mbit/s** 📱
+- *This is the absolute maximum for a single CPU core under TCP. It bypasses strict public firewalls easily while keeping your smartphone connection incredibly fast.*
+
+## Features
+
+- **Easy Setup:** Build fully working OpenVPN servers or clients in seconds.
+- **Connection Wizard:** Simple step-by-step setup for mobile phones (Roadwarrior), laptops, and router-to-router networks (**Site-to-Site with Multi-Clients Routing**).
+- **Enterprise-Grade Speeds (DCO Support):** Out-of-the-box support for OpenVPN Data Channel Offload (DCO) to shift crypto processing directly into the Linux kernel, matching Wireguard performance.
+- **Smart MTU Engine:** Automatically calculates and tunes packet sizes to eliminate fragmentation, splitting the crypto load perfectly across multiple CPU cores.
+- **Secure Site-to-Site Routing:** Built-in `iroute()` hook dynamically maps matching subnets and includes dynamic Anti-Loop Prevention to automatically block internal routing loops and prevent kernel freezes.
+- **Instant Mobile QR-Code Scan:** Shows a secure QR-code after setup. You can scan it with your phone camera to import the settings into the OpenVPN Mobile Connect app instantly.
+- **Effortless Installation & Troubleshooting:** Built-in Double-NAT detection and automated live port-open checking make the first startup easy, even behind strict provider modems.
+- **OpenVPN over TCP 443 (SSL-VPN):** Special travel-friendly presets to bypass strict public firewalls by hiding VPN traffic as standard HTTPS web traffic, achieving speeds over 200 Mbps on modern networks.
+- **Built-in DDNS Daemon:** Automatically updates your VPN connection using built-in support for DuckDNS, IPv64, dynv6, Dynu, and No-IP.
+- **Smart Firewall (DPI Defense):** Drops bad traffic and bans hackers in the Linux kernel using deep analysis for TCP and UDP ports.
+- **Automated Firewall Zones:** Automatically creates all needed firewall zones, traffic rules, and port forwardings.
+- **High-Security Keygen & Export:** Automatically builds RSA-2048/ECC-Prime256 keys, DH parameters, and TLS-crypt-v2, then packs them into one `.ovpn` file.
+- **Hardware Crypto Optimization:** Smart cipher settings select fast hardware encryption (AES-GCM) for powerful chips, or optimized software encryption (CHACHA20-POLY1305) for older routers to keep speeds high.
+- **Integrated Key Editor:** View, edit, download, and check key files and expiration dates directly inside your web browser.
+- **Simple Profile Import & Export:** Upload existing `.ovpn` profiles or multi-key configuration files to start new client connections instantly.
+- **Clear Status Table:** Shows a small overview of running tunnels, active process IDs (PIDs), encryption types, and live data transfer.
+
+## Configuration Layout
+
+The application manages settings inside `/etc/config/openvpn`:
+
+```ini
+config openvpn 'instance1'
+	option enabled '0'
+	option role 'server'
+	option config '/etc/openvpn/luci/instance1.conf'
+```
+
+## Directory Structure
+
+```text
+luci-app-openvpn-plus/
+├── Makefile
+├── LICENSE
+├── README.md
+├── po/
+│   ├── de/
+│   │   └── luci-app-openvpn-plus.po
+│   ├── zh-cn/
+│   │   └── luci-app-openvpn-plus.po
+└── root/
+    ├── etc/
+    │   ├── config/
+    │   └── hotplug.d/
+    │   │   ├── iface/
+    │   │   │   └── 35-luci-app-openvpn-plus-bootup
+    │   │   └── openvpn/
+    │   │       └── 35-luci-app-openvpn-plus-lifecycle
+    │   ├── openvpn/
+    │   │   ├── keys/
+    │   │   └── luci/
+    │   │       ├── default.nft
+    │   │       ├── client.default.conf
+    │   │       └── server.default.conf
+    │   └── uci-defaults/
+    │       └── 35_luci-app-openvpn-plus
+    ├── usr/
+    │   ├── libexec/
+    │   │   └── luci-app-openvpn-plus
+    │   └── share/
+    │       ├── luci/menu.d/
+    │       │   └── luci-app-openvpn-plus.json
+    │       └── rpcd/acl.d/
+    │           ├── luci-app-openvpn-plus.json
+    │           └── luci-app-openvpn-plus-status.json
+    └── www/
+        └── luci-static/resources/view/
+            ├── status/include/
+            │   └── 35_openvpn.js
+            └── vpn/
+                ├── openvpn.js
+                ├── openvpn-keygen.js
+                ├── openvpn-status.js
+                └── openvpn-wizard.js
+```
+
+## License
+
+Licensed under the Apache License 2.0.
+