https://utube.ro/videos/watch/00b1fb06-208e-4346-854d-89250d99f6b9 Keeping your homelab local-only is great for security, but sometimes you need to reach your services while you're away from home. In this video I set up OpenVPN Access Server in an Ubuntu 26.04 VM. I show how DCO (Data Channel Offload) closes the speed gap with WireGuard, then create user groups with access rules so each user only reaches the services they need. This video is sponsored by OpenVPN. All thoughts and experiences are my own. 🔗 Links OpenVPN Access Server: https://openvpn.net/access-server, Access Server install docs: https://openvpn.net/as-docs/installation-troubleshooting.html#situation--idon-t-want-to-use-your-linux-installation-script--how-can-i-install-it-manually-, CloudConnexa: https://openvpn.net/cloud-vpn/, 📌 Things to know before you start DCO needs the kernel's OVPN driver. That driver isn't in Ubuntu 24.04 LTS, so use 26.04. I had to use a VM because an LXC hit tunneling issues. If your ISP doesn't allow port forwarding (CG-NAT, or carrier-grade NAT), this setup won't work. Forward ports 443 and 1194 to your Access Server. I had to lower the MTU (maximum transmission unit) from 1420 to 1350 to keep connections stable. The free Access Server license includes 2 connections. CloudConnexa, OpenVPN's cloud-delivered ZTNA (Zero Trust Network Access) service, offers up to 5 free seats. ⏱️ Chapters 00:00 Local-only vs remote access 00:55 What is DCO (Data Channel Offload)? 01:58 Ubuntu 24.04 vs 26.04 DCO gotcha 02:27 Setup notes: VM vs LXC, service vs Docker 02:58 What we'll cover 03:43 Demo: admin profile with full access 05:00 Demo: media user (Plex only) 06:03 Demo: infrastructure user (Dockhand only) 06:58 Installing OpenVPN Access Server 09:59 Finding the admin UI and default credentials 10:55 Initial setup wizard 12:06 Changing the default admin password 13:21 Setting the server address to your WAN IP 14:08 CG-NAT warning 14:21 Adjusting the MTU 15:03 Checking the DCO setting 15:34 Port forwarding 443 and 1194 16:08 Planning user groups 16:55 Media group and access rules 17:52 Removing the global access rule 18:32 Infrastructure group 19:14 Admin group 19:45 Creating users 20:45 Setting user passwords 21:52 Enabling auto-login 23:13 Reviewing group access rules 24:03 Downloading connection profiles 25:18 Free tier limits and CloudConnexa 25:47 Wrap up 💬 Are you using OpenVPN or something else for private remote access to your homelab? Let me know in the comments. #OpenVPN #Homelab #SelfHosted #VPN #RemoteAccess Wed, 30 Sep 2026 01:18:21 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://utube.ro https://utube.ro/lazy-static/avatars/888f68a5-dd7d-4b7f-b73d-9e288452fcb8.png https://utube.ro/videos/watch/00b1fb06-208e-4346-854d-89250d99f6b9 All rights reserved, unless otherwise specified in the terms specified at https://utube.ro/about and potential licenses granted by each content's rightholder.