Redirect traffic of each vpn client through different external Socks5?

Question

VPN

There is a server with a raised OpenVpn, I would like to start up the traffic of each individual client through an external SOCKS5 server with authentication, tobish to be such a proxy distributor.

Answer 1

If I'm not confusing anything, the use of socks proxies is configured on the client. that is, you cannot simply redirect traffic from the VPN server to the Sox5 proxy. It doesn't work like that. You can prohibit the user's traffic from going anywhere else except for the proxy, but one way or another, the user must configure the use of a proxy server.

Answer 2

I did not do it myself, but ....
We divide the task into 3 stages.
1. VPN server. The client receives an IP address with a /32 mask, so each client will have to register a network of one IP. If you need to separate VPN clients.
2. We set a proxy, for example Dante, you can try it through Docker, in which we also register users and passwords.
3. All traffic of the VPN Client is redirected (or somehow intercepted) to our proxy via iptables. What is possible is not necessary - in browsers you can immediately register the server address.

Answer 3

Use the RedSocks program.