[{"_1":2,"_162":-5,"_163":-5},"loaderData",{"_3":4,"_18":19,"_25":26,"_141":142},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16,"_17":11},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","dockerRebrandTour","routes/_layout",{"_20":-5,"_21":22,"_23":11,"_24":22},"username","isAskGordonEnabled",true,"showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":-5,"_89":90,"_128":-5,"_129":11,"_130":22,"_131":11,"_132":11,"_133":11,"_134":-5,"_135":11,"_136":-5,"_137":138,"_139":91,"_140":-7},"canonicalUrl","https://hub.docker.com/r/cbwang/openconnect-proxy/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","cbwang","reponame","openconnect-proxy","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":74,"_79":11,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2021-02-03T07:50:27.568276Z","description","","is_private","last_updated","2021-02-03T10:24:31.064185Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",1132,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# openconnect + microsocks\n\nThis Docker image contains an [openconnect client](http://www.infradead.org/openconnect/) (version 8.10 with pulse/juniper support) and the [microsocks proxy](https://github.com/rofl0r/microsocks) for socks5 connections (default on port 8889) in a very small [alpine linux](https://www.alpinelinux.org/) image (around 20 MB).\n\nYou can find the image on docker hub:\nhttps://hub.docker.com/r/cbwang/openconnect-proxy\n\n# Requirements\n\nIf you don't want to set the environment variables on the command line\nset the environment variables in a `.env` file:\n\n\tOPENCONNECT_URL=\n\tOPENCONNECT_USER=\n\tOPENCONNECT_PASSWORD=\n\tOPENCONNECT_OPTIONS=--authgroup \\\n\t\t--servercert --protocol= \\\n\t\t--reconnect-timeout 86400\n\n_Don't use quotes around the values!_\n\nSee the [openconnect documentation](https://www.infradead.org/openconnect/manual.html) for available options. \n\nEither set the password in the `.env` file or leave the variable `OPENCONNECT_PASSWORD` unset, so you get prompted when starting up the container.\n\nOptionally set a multi factor authentication code:\n\n\tOPENCONNECT_MFA_CODE=\n\n# Run container in foreground\n\nTo start the container in foreground run:\n\n\tdocker run -it --rm --privileged --env-file=.env \\\n\t -p 8889:8889 cbwang/openconnect-proxy:latest\n\nThe proxies are listening on ports 8889 (socks). Either use `--net host` or `-p :8889` to make the proxy ports available on the host.\n\nWithout using a `.env` file set the environment variables on the command line with the docker run option `-e`:\n\n\tdocker run … -e OPENCONNECT_URL=vpn.gateway.com/example \\\n\t-e OPENCONNECT_OPTIONS='' \\\n\t-e OPENCONNECT_USER= …\n\n# Run container in background\n\nTo start the container in daemon mode (background) set the `-d` option:\n\n\tdocker run -d -it --rm …\n\nIn daemon mode you can view the stderr log with `docker logs`:\n\n\tdocker logs `docker ps|grep \"cbwang/openconnect-proxy\"|awk -F' ' '{print $1}'`\n\n# Use container with docker-compose\n\n\tvpn:\n\t container_name: openconnect_vpn\n\t image: cbwang/openconnect-proxy:latest\n\t privileged: true\n\t env_file:\n\t - .env\n\t ports:\n\t - 8889:8889\n\t cap_add:\n\t - NET_ADMIN\n\t networks:\n\t - mynetwork\n\n\nSet the environment variables for _openconnect_ in the `.env` file again (or specify another file) and \nmap the configured ports in the container to your local ports if you want to access the VPN \non the host too when running your containers. Otherwise only the docker containers in the same\nnetwork have access to the proxy ports.\n\n# Route traffic through VPN container\n\nLet's say you have a `vpn` container defined as above, then add `network_mode` option to your other containers:\n\n\tdepends_on:\n\t - vpn\n\tnetwork_mode: \"service:vpn\"\n\nKeep in mind that `networks`, `extra_hosts`, etc. and `network_mode` are mutually exclusive!\n\n# Configure proxy\n\nThe container is connected via _openconnect_ and now you can configure your browser\nand other software to use one of the proxies (8889 for socks).\n\n# ssh through the proxy\n\nYou need nc (netcat), corkscrew or something similar to make this work.\n\nUnfortunately some git clients (e.g. Gitkraken) don't use the settings from ssh config\nand you can't pull/push from a repository that's reachable (DNS resolution) only through VPN.\n\n## nc (netcat, ncat)\n\nSet a `ProxyCommand` in your `~/.ssh/config` file like\n\n\tHost \n\t\tProxyCommand nc -x 127.0.0.1:8889 %h %p\n\nor (depending on your ncat version)\n\n\tHost \n\t\tProxyCommand ncat --proxy 127.0.0.1:8889 --proxy-type socks5 %h %p\n\nand your connection will be passed through the proxy.\nThe above example is for using git with ssh keys.\n\n# Build\n\nYou can build the container yourself with\n\n\tdocker build -f build/Dockerfile -t cbwang/openconnect-proxy:custom ./build\n\n","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":22,"_83":11,"_84":11},"read","write","admin","user","storage_size",45513029,"orgData","recentTags",[91],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":100,"_50":117,"_118":94,"_119":33,"_120":56,"_57":121,"_122":123,"_124":108,"_125":117,"_126":66,"_127":22},"content_type","creator",1106366,"full_size",8500523,"id",135880515,"images",[101],{"_102":103,"_104":105,"_106":48,"_107":108,"_109":110,"_111":112,"_113":48,"_114":-5,"_115":96,"_63":66,"_116":-5},"architecture","amd64","digest","sha256:cb321453efb75b119d6e51e229da2bb2259f7ec14a7efc94d793f22576d9ecd9","features","last_pulled","2026-11-10T22:09:02.192604636Z","last_pushed","2021-02-03T10:24:31Z","os","linux","os_features","os_version","size","variant","2021-02-03T10:24:30.761342Z","last_updater","last_updater_username","media_type","latest","repository",11241128,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxRunInCloud","showSbxAgenticPlatformBadge","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":143,"_150":151,"_137":160,"_161":11},{"_40":144,"_42":145,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":146,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":147,"_79":11,"_80":149,"_85":33,"_86":87},[],[44],[56],{"_75":11,"_76":148},[78],{"_82":22,"_83":11,"_84":11},"tags",{"_152":64,"_153":-5,"_154":-5,"_155":156},"count","next","previous","results",[157],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":158,"_50":117,"_118":94,"_119":33,"_120":56,"_57":121,"_122":123,"_124":108,"_125":117,"_126":66,"_127":22},[159],{"_102":103,"_104":105,"_106":48,"_107":108,"_109":110,"_111":112,"_113":48,"_114":-5,"_115":96,"_63":66,"_116":-5},[],"canDeleteTags","actionData","errors"]

cbwang/openconnect-proxy

Tags for cbwang/openconnect-proxy