eurephia - a flexible OpenVPN authentication plug-in

eurephia is an authentication plug-in for OpenVPN. OpenVPN is a simple but yet powerful application to create secure VPN connections between computers and networks. OpenVPN includes a safe regime using SSL certificates to authenticate users.

This plug-in enhances OpenVPN by adding user name and password authentication in addition. An eurephia user account is a combination of minimum one OpenVPN SSL certificate and a user name with a password assigned. It is also possible to setup several eurephia user names to use a shared OpenVPN certificate.

If too many failed log-ins is attempted, eurephia will automatically blacklist IP addresses, certificates or user accounts. The user accounts and certificates can also be manually blocked, and upon the next authentication (also within active sessions) the user will be rejected immediately.

eurephia supports dynamic firewall updates per connection/session on Linux based router/firewall running OpenVPN. This means that each user account may have their own restricted access profile to the network, and you can control the network access with great granularity. This is achieved by using predefined iptables chains, which is activated after the user is authenticated. For more in-depth information, have a look at the documentation.

All information is stored in a database and all changes to the accounts will be effective immediately. At the moment eurephia supports the SQLite database. Drivers for PostgreSQL and MySQL is being planned.