Unix AWS VPN Client

Connects to AWS Client VPN with OSS OpenVPN using SAML authentication for Unix environments. Linx, Mac, BSD. Forked from @samm-git's aws-vpn-client.

See samm-git's blog post for the implementation details.

AWS released Linux desktop client, however, it's extremely buggy and doesn't provide useful logging. Supposedly works on Ubuntu...

Install

Please make sure you have Go 1.17+ installed on your system

Building Client

1. $ git clone https://github.com/ajm113/unix-aws-vpn-client.git
2. $ cd unix-aws-vpn-client
3. go build .
4. cp ./unix-aws-vpn-client {TO a DIR that's listed in your $PATH or whatever your personal preference is}

Setting Up

1. Inside the root directory run ./unix-aws-vpn-client setup.
2. Let it run until it spits out openvpn_aws executable. -- You may need to install required dependencies that compiler prints out if it stops.
3. Move openvpn_aws to a directory of your choosing.
4. Copy/paste this template into your awsvpnclient.yml inside ~/.config/awsvpnclient/ folder:

debug: false                            # Prints useful debugging information
browser: false                          # Opens the web browser for auth step. Works a little wonky on some distros.
vpn:
  openvpn: {path to your openvpn_aws}   # Path to openvpn_aws binary.                        
  sudo: /bin/sudo                       # Sudo command to run when establishing a tunnel to AWS.    (default is fine for most distros)
  shell: /bin/sh                        # bash/shell command when establishing a tunnel to AWS.     (default is fine for most distros)
  shellargs:                            # bash/shell commands to add when executing shell commands. (default is fine for sh)
    - "-c"
server:
  addr: "127.0.0.1:35001"              # SAML Server listen address after auth redirect. (default is fine for most setups)

Running Tunnel

After everything is compiled and setup. All you have to do now is run:

$ unix-aws-vpn-client start --config myvpnfile.ovpn

After you successfully authenticated (and sudo login) you should now have a tunnel to AWS.

Todos

• Add unit testing to code.
• Graceful shutdown support.
• General code improvements (typo fixes welcomed!).
• Improved config documentation w/ improved defaults!
• Add memes?... idk