OpenVPN: The EASY Way To Remotely Connect To Your Homelab

Keeping your homelab local-only is great for security, but sometimes you need to reach your services while you're away from home. In this video I set up OpenVPN Access Server in an Ubuntu 26.04 VM. I show how DCO (Data Channel Offload) closes the speed gap with WireGuard, then create user groups with access rules so each user only reaches the services they need.

This video is sponsored by OpenVPN. All thoughts and experiences are my own.

🔗 Links

• OpenVPN Access Server: https://openvpn.net/access-server
• Access Server install docs: https://openvpn.net/as-docs/installation-troubleshooting.html#situation--idon-t-want-to-use-your-linux-installation-script--how-can-i-install-it-manually-
• CloudConnexa: https://openvpn.net/cloud-vpn/

📌 Things to know before you start

DCO needs the kernel's OVPN driver. That driver isn't in Ubuntu 24.04 LTS, so use 26.04.
I had to use a VM because an LXC hit tunneling issues.

If your ISP doesn't allow port forwarding (CG-NAT, or carrier-grade NAT), this setup won't work.

Forward ports 443 and 1194 to your Access Server.

I had to lower the MTU (maximum transmission unit) from 1420 to 1350 to keep connections stable.

The free Access Server license includes 2 connections. CloudConnexa, OpenVPN's cloud-delivered ZTNA (Zero Trust Network Access) service, offers up to 5 free seats.

⏱️ Chapters
00:00 Local-only vs remote access
00:55 What is DCO (Data Channel Offload)?
01:58 Ubuntu 24.04 vs 26.04 DCO gotcha
02:27 Setup notes: VM vs LXC, service vs Docker
02:58 What we'll cover
03:43 Demo: admin profile with full access
05:00 Demo: media user (Plex only)
06:03 Demo: infrastructure user (Dockhand only)
06:58 Installing OpenVPN Access Server
09:59 Finding the admin UI and default credentials
10:55 Initial setup wizard
12:06 Changing the default admin password
13:21 Setting the server address to your WAN IP
14:08 CG-NAT warning
14:21 Adjusting the MTU
15:03 Checking the DCO setting
15:34 Port forwarding 443 and 1194
16:08 Planning user groups
16:55 Media group and access rules
17:52 Removing the global access rule
18:32 Infrastructure group
19:14 Admin group
19:45 Creating users
20:45 Setting user passwords
21:52 Enabling auto-login
23:13 Reviewing group access rules
24:03 Downloading connection profiles
25:18 Free tier limits and CloudConnexa
25:47 Wrap up

💬 Are you using OpenVPN or something else for private remote access to your homelab? Let me know in the comments.

#OpenVPN #Homelab #SelfHosted #VPN #RemoteAccess