How to wrap VPN traffic?

Question

linux

Good afternoon.
there is a server 192.168.1.2 with two vpn interfaces
tun0 - server vpn for connecting users to it 10.10.10.0
tun1 - client of another vpn server 10.10.20.0
How to wrap all traffic from tun0 to tun1 and all traffic from 192.168.1.0/24 to tun0 .to. will act as a gateway

Answer 1

I found an article on Habré, made it according to it, everything works https://habrahabr.ru/sandbox/78897/

Answer 2

It will be problematic to turn all traffic from 192.168
.

iptables -A FORWARD -i tun0 -o tun1 -j ACCEPT
iptables -A FORWARD -i tun1 -o tun0 -j ACCEPT

you also need to allow the network 192.168.1.0/24 to go to tun1

iptables -A FORWARD -s 192.168.1.0/24 -o tun1
iptables -A FORWARD -i tun1 -d 192.168.1.0/24

After that, simple routing:
all clients behind tun0 need to register route add default gw 10.10.10.1 (ip address tun0), or push this route to them using the VPN server (push "redirect-gateway" in OpenVPN)
For server 192.168.1.2, you need to specify default gw the one behind tun1, and additionally set the route to the server where the external VPN server is located
Somehow, maybe I made a mistake, but I have about the same configuration