client -> vps -> Commercial VPN Provider

[TheOtterslider]

Firstly, I'm not certain I'm in the right place. If I'm not, let me know and I'll remove.

I'm trying to sort out how I can self-host an amnesia vpn server on a vps that will serve as a middle-man. I want the client to use amnesia to connect to the VPS; however, then I want to have the traffic OUT of the vps to be sent over a commercial VPN.

I've got amnesia x-ray set up and working just fine.
I've also been able to set up openvpn3 on my VPS and have it working.
I've also succeeded in getting SSH to be available while I have my VPS connected to my commercial VPN.

I can't sort out how the docker containers do networking to have that traffic go out over the VPN.

Before you ask: I can't simply use my commercial VPN on the client because it's blocked. But I want to watch netflix, etc... and my VPS is flagged. I'm thinking that tunneling the traffic over a commercial VPN that supports netflix watching will resolve this issue.

Anyone have any thoughts or ideas for me to look at? Thanks in advance....

[ashad765]

I have 3 suggestions:

1. Openvpn on desktop support proxy so you can tunnel VPN traffics through proxy clients like V2rayN, but it only works on desktop.

2. If your VPN provider support wiregurad you can remove openvpn3 entirely and use wireguard as a outbound inside docker.

3. Install xray through non docker way like original script

Docker networking could be extremely messy, so my vote would be the third one unless you really need amnesia x-ray.

[TheOtterslider]

Thanks for the ideas. I'm going to look into 3 then 2.

[TheOtterslider]

I ended up going the number 2 route. It works like a treat. For those that come across this later:

ssh into the vps
start an interactive terminal for the amnesia docker comtainer: docker exec -it amnezia-xray /bin/bash
edit /opt/amnezia/xray/server.json
add the wireguard outbound and a section for DNS:

` {

        "protocol": "wireguard",

        "settings": {

            "DNS": "xxx.xxx.xxx.xxx",

            "address": [

                "xxx.xxx.xxx.xxx"

            ],

            "peers": [

                {

                    "allowedIPs": [

                        "0.0.0.0/0"

                    ],

                    "endpoint": "THE.END.PNT.IPx:123456",

                    "publicKey": "THE_PUBLIC_KEY"

                }

            ],

            "secretKey": "THE_SECRET_KEY"

        },

        "tag": "wireguard"

    },

    {

        "protocol": "freedom"

    }

],

"routing": {

    "rules": [

        {

            "outboundTag": "wireguard",

            "port": 53,

            "type": "field"

        }

    ]

`
save it
run /opt/amnezia/start.sh from within the docker container to restart the server
test

As a bonus, the functionality within the amnesia client to add users still works a treat.