In such places, a great work-around for this type of censorship is by using a Virtual Private Network (VPN). But with a Raspberry Pi computer and some basic coding skills, you can actually build your own VPN server from the comforts of your own desk. From there, you can browse the Internet with a heightened sense of security through your home network, as well as accessing shared files from your home computer on your own local-area network.
What You Need to Build a VPN Server on Raspberry Pi
The following are necessary in order to build your own VPN server on your Raspberry Pi computer.
Raspberry Pi/Pi 2 computer 8GB micro SD card SD card reader HDMI monitor (either a computer monitor or a television) USB keyboard Ethernet network cable 5-volt mini USB power supply (such as a phone charger)
Step 1: Prepare to install Raspberry Pi operating system
This first step involves the micro SD card. If you are using or reusing an old SD card, you must make sure you have properly formatted it to remove any old files. This can be done for free at http://sdcard.org Once the card is fully formatted, insert it into your card reader.
Step 2: Installing Raspbian onto your Raspberry Pi Computer
Get online and visit the Raspberry Pi website. Download the New Out of the Box Software (NOOBS). NOOBS is an operating system installation manager. Open the file, select all files, then drag and drop them to your SD card in the card reader. Now, take your SD card and insert it into the Raspberry Pi. Follow that up by connecting a monitor, keyboard, and power cable. Once the Raspberry Pi powers up, the green light will begin flashing as the computer reads the data from the SD card. You will then see a window open. Choose Raspbian and hit ENTER to install. Make sure to change the default password before you go any further.
Step 3: Create a static IP address for your Raspberry Pi
Connect your Raspberry Pi to your router with the Ethernet cable. Pull up a command prompt and type: ifconfig A host of information will follow, some of which you need to record with pen and paper. Record the digits and letters following:
Inet addr Bcast Mask
Back to the command prompt, type: sudo route -n Now record the characters after:
Gateway Destination
Back at the command prompt, type: sudo nano /etc/network/interfaces Find the line that reads “iface eth0 inet dhcp” or “iface eth0 inet manual” If your file says “manual”, use the arrow keys to delete it and replace it with the world “static”. Next, put your cursor at the end of the line and press Enter. On the following lines, insert the information you notated in the lines above between the square brackets.
Address [your current IP address] Netmask [your subnet mask] Network [your destination] Broadcast [your broadcast range] Gateway [your gateway]
Save the file by press CTRL and X at the same time. At the command prompt, type: sudo reboot
Step 4: Constructing your VPN on Raspberry Pi
Raspbian comes with OpenVPN installed and ready to unpack. At the command prompt, type: sudo apt-get install openvpn Now you must generate keys to ensure you’re the only one using your VPN. Use Easy_RSA to generate your keys. When you want to execute commands in your root directory, make sure you type: sudo -s. At the command prompt, type: cp-r/usr/share/doc/openvpn/examples/easy-rsa/2.0/etc/openvpn/easy-rsa Next type: cd /etc/openvpn/easy-rsa In the text that opens find the line that begins: export EASY_RSA= you need to move the cursor down to edit this line to read: export EASY_RSA=”/etc/openvpn/easy-rsa” Find the text that reads “export KEY_SIZE=1024” and change the numeral to “2048”. Keep scrolling and change the proper settings on Country and City.
Step 5: Build certificates for your VPN
Open the easy-rsa directory at the command prompt type by typing: cd /etc/openvpn/easy-rsa Then type: source ./vars Next, type: ./clean-all This will remove any previous keys in the system. Next type: ./build-ca
Step 6: Name the server
You can name your server whatever you want, just don’t forget the name Type: ./build-key-server [ServerName] Just a few more steps round out the process. Common Name is the name of the server Challenge password must be left blank Type “y” for sign the certificate. Finally when prompted with the question: 1 out of 1 certificate requests certified, commit? [y/n] Type “y” and the process is complete.
