如何通過VPN容器路由任何Docker容器

44 comments

1. Thanks, very informative. I』m just about to get into unraid

2. Are you able to route more than one docker through a container? I did this with Sonarr and it works great. Tried with Radarr and it's not working.

3. Using this video the docker documentation and some trial and error I got enough clues to get this working in a pure compose stack on a docker endpoint.
   Seems like there may be a limit of one (1) container that you can put behind the VPN and it seems to breaks inter-service communication eg. being able to use rutorrent from sickchill. Will need to keep testing, but at least it's has the desired effect

4. I could use some help. I set up the binhex-sabnzbdvpn successfully. I then used a working binhex-sonarr docker and pointed it at the VPN docker successfully. Unfortunately, something went wrong and corrupted a different docker install, and I had to start over. Now, second time around, I cannot get to the WebUI for sonarr. Bother the VPN container and Sonarr (non-vpn container) are running fine. In fact, sonarr is still dowloading, but I cannot get the WebUI. I have the Container port set in the VPNcontainer as before, and the Extra Parameter and network selected according to the video in the non-vpn container. In fact, curl ifconfig.io even gives me the vpn address successully. Why do you think the WebUI port forward is not working?

5. do i need to do this if i run my other docker traffic through privoxy in the delugevpn container?

6. when i try to route my jackett thru binhexqbittorrentvpn i can not access the webui. I have put the default port 9117 into binhexqbittorrentvpn but i still can not access the webui of jackett. sonarr can still talk to jackett so the container is working fine but i just can't access the webui.

7. Super helpful thanks heaps

8. Id been hoping for info on how to do something like this forever. But when I did it, for some reason it severely tanked my speeds on both deluge AND NZBGet. It's as if combining the two through the same VPN port via the deluge docker container bottlenecked the connection. Once I reversed what I did and brought it back to just VPN on Deluge and nothing on NZBGet (besides SSL connections) my speeds came back with a vengeance. Weird.

9. Any idea why I might be having trouble getting this to work? Trying this out with Sabnzbd and am not able to get the webgui running but can confirm the network is going through the vpn. I have privoxy enabled in deluge settings and added both webgui ports.

10. Probably a noob question, but does this effectively replace the need to use Privoxy for sonarr/radarr?

11. Whenever i restart delugeVPN i have to remember to also manually restart the dockers connected to that container after 2-3 minutes.

    Is there a way to automate this process so that 3 minutes after [VPN-docker] is restarted automatically [container1],[container2] are restarted?

    Great video otherwise, i had been looking into this a couple months back and didnt find anything on it, glad you're on top of things!

12. Wow, holy hell dude… I am so glad I went back and watched this one, I skipped it for some reason and this is by far the most useful to me in a long time. Till now I have been manually forcing all traffic for containers through the VPN I have set up in pfsense and using rules and such to for their IPs through. This seems a LOT more simplistic.

13. Heads up, if you've followed the guide exactly how Spaceinvader One has done it, and you still cannot access the WebUI on the passthrough container, you need to edit the "binhex-sabnzbdvpn" or "binhex-delugevpn" container, and type "yes" instead of "no" on the ENABLE_PRIVOXY option. Then save. Restart the passthrough container, and restart the vpn container, voila!

14. One thing I have also just noticed is that if you restart the delugevpn container (or whatever container is housing your VPN), the containers that are using that container for their network, will stop responding – you have to restart those containers.

    I think it has to do with the VPN container network dropping during restart, then no longer being recognized until the other containers are restarted.

    Anyone else have this issue? – Anyway to initiate a restart of the dependant containers when the VPN container is rebooted?

15. also if you are running your containers on separate IP address (I do), remember you will need to go into any of your containers like radarr, sonarr etc, and update the NZBget (or whatever downloader you changed) and update the IP to point to the delugeVPN container IP but with the relevant port number

    e.g if you were running delugeVPN on 192.168.1.50 and NZBget on 192.168.2.60, radarr, sonarr etc would be pointing to 192.168.2.60:6789 for NZBget … when you change its network to the Deluge container, radarr, sonarr etc will no longer be able to reach 192.168.2.60:6789 …. so change them to point to <delugecontainerIP>:6789 …
    eg. 192.168.1.50:6789

16. Heads up – if you guys want to confirm DNS doesn't have any leaks in the container is also coming from the same place, open the container console and run:

    curl -ks https://www.dnsleaktest.com | grep flag | sed -e 's/.*from (.*),.*/1/'

    If you want to check DNS destination on all your containers, open the main Unraid console and run:

    for I in $(docker ps –format '{{.Names}}'); do
    location=$(docker exec -it $I curl -ks https://www.dnsleaktest.com
    | grep flag | sed -e 's/.*from (.*),.*/1/');
    printf "%-15s%sn" "$I:" "$location";
    done

    Hope that helps.

17. I see you did not remove the port from nzget container. Every other time I have done this, I have had to add the port to the vpn and remove it from the original container?

18. Deluge Web UI shows external IP in lower right of screen

19. Hey man, I got this working once slaving nzbgetvpn (with vpn deactivated) to binhex-delugevpn. I wanted to play around with this feature more so deactivated this link to link other containers. But now I can't access any slaved container's UI. I think the master/slave linking works, only the webUI doesn't. I did not forget to add the port for webUI access. Help?

20. Hey, do you by any chance know if it's possible to get jellyfin working with this method? I saw on some other threads from about a year ago that DLNA in Jellyfin would only work if the container was running in host mode. I've tried but I keep getting

    unraid jellyfin [ERR] [4] Dlna: Error sending socket message from [container IP] to [presumably DLNA server IP]

21. Great video as always! Will definitly use this for some of my containers.

    Also a quick question: can you make a video about setting up wallabag? It's a selhosted alternative to Pocket.

22. I'm getting an error when I add the port for nzbget which is set to 6789. Error response from daemon: driver failed programming external connectivity on endpoint binhex-delugevpn (guid): Bind for 0.0.0.0:6789 failed: port is already allocated.  Anyone else?

23. Could you please make a tutorial how to setup a website and wordpress on unraid? I followed Linuxservers guide but it just doesn't work.

24. Would it be possible, and would it make any sense, to route an Unraid VM through the binhex-delugevpn docker container? Or, would it be best to just use up another license and run an openvpn client on the VM?

25. Hey man may I suggest in future to try installing Android on VM in desktop mode with shared GPU.
    Try some software, games, controllers of what might work and what not.

26. Another great video!! Anyway you can do one on Syncthing please or some screen shots on the config will work as well.

27. binhex-sabnzbd has 2 port numbers 8080,8090 I have tried add one or both and can't access the UI how should this be configured please?

28. much easier to just run the openvpn container and forward all containers through that one instead of a binhex-downloaderapp one

29. How do I upgrade to the same motherboard and CPU without loosing data and my license. I have just one core nvidia cpu and I can』t play games while on Plex. Thanks again for all the greats videos.

30. Great video. Almost everything worked ok without errors, I tried using the binhex deluge vpn container as the source and tried to get jackett to use this container for vpn access. Bashing into Jackett shows a vpn ip address, only problem is I cannot access webui of Jackett even after adding the port to deluge container…it just trys for ages then cannot connect error..tried restarting both containers. Works as expected if I switch off vpn in deluge template.

31. Nice video as normal, doesnt seem to work with Sickchill 🙁

32. This works well for securing and accessing the containers locally.
    I have this running on two servers and I am unable to access the UI for the containers when VPN'd into the network the server is on. On one the VPN server is on the router and the other is on the Unraid machine. I'll keep working at it until I figure the correct settings and if I sort it will then share here and Reddit.

33. Thanks again for a great video. Learned something new today. Im using the delupge-vpn docker allready 🙂

34. I'd love to know how to combine what I've learned here and what i learned in your Let's Encrypt reverse proxy video! Can I still use the NGINX portion of Let's Encrypt to get into these? Would I just point the NGINX script to the primary container which the secondary container points to? And if so, does that always work, such as when in Emby you use the option to say that secured connections are handled by reverse proxy?

35. I've been wanting to do this for a while now. Thank you!

36. now is it possible to tie a VM into this?

37. As always, fantastic stuff! Without you I would have been so lost with getting everything setup in my server

38. Hello, I got PIA using your Referal Link. One question if I may. I have Pop_OS! 19.10, the PIA given (Generated) ovpn files don't work on the Network Manager of Pop_OS! Any suggestions please?

39. Can you please make one on using let encrypt reverse proxy for vms outside unraid. Is this even possible?

40. Thank you for this nice tutorial and for all the other ones of course. 🙂

    Everything works fine, but just can't access NZBget anymore from outside my network (through ddns). Is there anything I should change as well for this to work? (I'm using custom (host)ports for both containers)

41. Another great video!

    Is there a workaround if two containers use the same HOST port and you want to use them both through the VPN container?
    What if a container that is using this doesn't have curl installed, is there recommendations to install curl within that container via the terminal to validate the IP?

42. Would this work if I wanted to run my Jellyfin docker (which also uses Letsencrypt reverse proxy and DuckDNS) traffic through my VPN? (VPN supports portforwarding). How would I go about doing that, if it is even possible?

43. great video and great idea.. i don't seem to able to push dockers that use vnc as a connection through the other docker. ive tried to push jdownloader through the sabnzb vpn docker but i cant connect to it. Is would be great if you could do a video been able to push other network devices through the vpn without setting up a vm vpn like pfsense or a linx vm. thanks

44. do you think you can do a video on running synclounge on unraid server and how it works with letsencrypt. i cant seem to figure out the settings for synclongue to use my server instead of their own.
    Thanks in advance! and great videos so far! I have learnt so much by watching your videos!

Comments are closed.