VPN Control
A multi-VPN manager that decides who can reach what: each user sees and accesses only the machines and services they're entitled to, whatever VPN they use.
What it does
- OpenVPN, WireGuard and IPsec from a single console
- Per-user and per-group permissions on machines, ports and services
- Tailored network visibility: everyone sees only what they can use
- Firewall rules applied and removed automatically on every connection
- Live sessions in real time, with instant disconnect
- Users from LDAP or SSO, with two-factor authentication
- Full log of access and blocked attempts
- Multiple sites and VPN servers managed together
A VPN usually opens the whole network to whoever connects. VPN Control does the opposite: each user only gets in where they need to.
Where it starts
The project grew out of a system I run in production: on every OpenVPN connection it applies firewall rules specific to each user, logs connections and disconnections and opens tunnels to authorised machines.
Where it's heading
I'm rewriting it as a complete platform: a single console for OpenVPN, WireGuard and IPsec, users and groups from LDAP or SSO, permissions on individual machines, ports and services, and tailored network visibility: the machines you can't access simply don't exist for you.
Real-time control
Active sessions, blocked attempts and access history in a single view, with the ability to disconnect a user or revoke a permission instantly across every VPN server.