Automated connection w/ network lock on Linux (Command line only)

[utu 0]

Hello,

  I've seen a few forum posts on this topic, but nothing that provides consistent direction.

 

Setting up an Ubuntu server that's command line only (no GUI.)  There seem to be a few options here to:

 

1. Connect the VPN on boot.

2. Lock traffic if the VPN drops.

 

 

You could use Eddie via CLI and set it up to run on boot.

You could call a generated openvpn config directly on boot and add appropriate iptables rules.

 

 

Is one method preferred over the other from a security perspective?

 

Does anyone have a good list of iptables rules I could combine with auto-launching openvpn if Eddie is not used? I could copy the rules applied by Eddie, but those are dynamically updated based on the AirVPN server list it seems (to allow those connections).

 

Thanks!
 

Jeff