README
¶
OpenConnect Daemon
OpenConnect Daemon allows a user to connect to a Cisco AnyConnect VPN. It uses openconnect, Linux policy-based routing and nftables to support static as well as DNS-based exclusion of traffic from the tunnel (split tunneling) and prevention of unprotected network access on untrusted networks (Always-On VPN). The OpenConnect Daemon runs as systemd service and the user interacts with it using the oc-client tool.
Installation
Please see Installation for installation instructions.
Usage
You can connect to the VPN with your current settings with:
$ oc-client
or
$ oc-client connect
You can list VPN servers in your XML profile (/var/lib/oc-daemon/profile.xml)
with:
$ oc-client list
You can show the current status with:
$ oc-client status
You can disconnect the VPN with:
$ oc-client disconnect
Please see Usage for more usage and configuration information.
Documentation
Please see the docs folder for user and development documentation.
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
oc-client
Oc-client is the OC-Daemon client.
|
Oc-client is the OC-Daemon client. |
|
oc-daemon
Oc-daemon is the OC-Daemon.
|
Oc-daemon is the OC-Daemon. |
|
oc-daemon-vpncscript
Oc-daemon-vpncscript is the vpncscript used by OC-Daemon.
|
Oc-daemon-vpncscript is the vpncscript used by OC-Daemon. |
|
internal
|
|
|
addrmon
Package addrmon contains the address monitor.
|
Package addrmon contains the address monitor. |
|
api
Package api contains the Unix Domain Socket API.
|
Package api contains the Unix Domain Socket API. |
|
client
Package client contains the OC-Daemon client.
|
Package client contains the OC-Daemon client. |
|
cpd
Package cpd contains the Captive Portal Detection.
|
Package cpd contains the Captive Portal Detection. |
|
daemon
Package daemon contains the OC-Daemon.
|
Package daemon contains the OC-Daemon. |
|
dbusapi
Package dbusapi contains the D-Bus API.
|
Package dbusapi contains the D-Bus API. |
|
devmon
Package devmon contains the device monitor.
|
Package devmon contains the device monitor. |
|
dnsmon
Package dnsmon contains the DNS monitor.
|
Package dnsmon contains the DNS monitor. |
|
dnsproxy
Package dnsproxy contains the DNS proxy.
|
Package dnsproxy contains the DNS proxy. |
|
execs
Package execs contains external executables.
|
Package execs contains external executables. |
|
ocrunner
Package ocrunner contains the openconnect runner.
|
Package ocrunner contains the openconnect runner. |
|
profilemon
Package profilemon contains the XML profile monitor.
|
Package profilemon contains the XML profile monitor. |
|
sleepmon
Package sleepmon contains the sleep monitor.
|
Package sleepmon contains the sleep monitor. |
|
splitrt
Package splitrt contains the split routing.
|
Package splitrt contains the split routing. |
|
trafpol
Package trafpol contains the traffic policing.
|
Package trafpol contains the traffic policing. |
|
vpncscript
Package vpncscript contains the vpncscript.
|
Package vpncscript contains the vpncscript. |
|
vpnsetup
Package vpnsetup contains the VPN setup component.
|
Package vpnsetup contains the VPN setup component. |
|
pkg
|
|
|
client
Package client contains code for OC-Daemon clients.
|
Package client contains code for OC-Daemon clients. |
|
logininfo
Package logininfo contains the login information for OpenConnect.
|
Package logininfo contains the login information for OpenConnect. |
|
vpnconfig
Package vpnconfig contains the VPN configuration.
|
Package vpnconfig contains the VPN configuration. |
|
vpnstatus
Package vpnstatus contains the VPN status.
|
Package vpnstatus contains the VPN status. |
|
xmlprofile
Package xmlprofile contains the XML profile.
|
Package xmlprofile contains the XML profile. |
|
tools
|
|
|
dbusclient
Dbusclient is an example of a D-Bus API client.
|
Dbusclient is an example of a D-Bus API client. |
|
devmon
Devmon is a device monitor example.
|
Devmon is a device monitor example. |
|
dnsproxy
Dnsproxy is a DNS proxy example.
|
Dnsproxy is a DNS proxy example. |
|
ocrunner
Ocrunner is a OC-Runner example.
|
Ocrunner is a OC-Runner example. |