OpenVPN over SSH Tunnel for Windows

A turnkey solution for providing whole-system VPN access on Windows via SSH tunnel. No good alternative exists for SSH-based system-wide VPN on Windows.

Quick Start

For End Users:

• See README.txt (or README_IR.txt for Persian, README_RU.txt for Russian)
• Run RUN-ME-Connect-VPN.bat as Administrator

For Setup/Deployment:

• See SETUP.md for complete configuration instructions
• Generate required sensitive files (not included in repo)

What This Does

1. Creates SSH tunnel to remote server
2. Forwards local port to remote OpenVPN server
3. Connects OpenVPN client through the tunnel
4. Routes all system traffic through VPN

Architecture

Windows Client
    ↓ (OpenVPN client)
Local Port 11940
    ↓ (SSH tunnel)
Remote SSH Server (port 22/custom)
    ↓
Remote OpenVPN Server (port 1194)
    ↓
Internet

Why This Exists

• No turnkey SSH-based whole-system VPN solution exists for Windows
• Useful for restrictive network environments
• Provides double-layer security (SSH + OpenVPN)
• User-friendly for non-technical users

Features

• ✅ Machine-specific file encryption
• ✅ Automatic cleanup on failure
• ✅ Multi-language documentation
• ✅ Administrator privilege checking
• ✅ Comprehensive error handling

Files

File	Purpose
SETUP.md	Start here - Complete setup & configuration guide
README.txt	End-user documentation (English)
README_IR.txt	End-user documentation (Persian/Farsi)
README_RU.txt	End-user documentation (Russian)
RUN-ME-Connect-VPN.bat	Entry point - run as Administrator
backend/vpn-backend.ps1	Main connection logic
backend/encryption-utils.ps1	File encryption system
backend/*.example	Templates for sensitive files

Required Files (Not Included)

These must be created - see SETUP.md:

• backend/openvpn-key - SSH private key
• backend/client.ovpn - OpenVPN configuration with certificates

Security

• Sensitive files are excluded via .gitignore
• Encryption system uses machine-specific hardware identifiers
• Encrypted files won't work if moved to different computers

License

Created for personal/organizational use. Adapt as needed.

---

Use Case: Providing VPN access in restrictive environments