ooni / ooni/devops

Fix openvpn server side deployment

Open
#228 3 comments 0 reactions 1 assignee View on GitHub

@hellais is already working on this.

Since Mar 31, 2025.

funder/otffoss2025
Dominant language
HCL
Stars
4
Forks
15
Avg merge
1h 50m
Merged PRs (30d)
4

Description

In https://github.com/ooni/devops/issues/195 the greenhost deployment of the openvpn server was terminated.

It was not clear to us at the time that this would impact probes, but it did since that was the only true server running openvpn, while the other endpoints were configured to just be simple TCP proxies.

As a result of this we are now in a situation where all openvpn tests are failing as the proxying service is not forwarding traffic to any valid backend.

We should find a way to unbrick this by:

  • Setting up a new instance of the openvpn service
  • Migrating the keys over to the new service (this is pending on getting the private keys from @ainghazal as we don't have a backup of them)
  • If we aren't able to migrate they keys we will have to create new credentials and ship an update of probe with the new keys

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.