VPN and networking

Enable TUN/TAP for OpenVPN

Load the tun module so OpenVPN can create a tunnel on Linux.

OpenVPN needs a TUN (or TAP) device. On a Noble VPS the module is available; you still have to load it and persist it.

Load the module

Load TUN, then confirm the device exists.

Bash

modprobe tun
ls -l /dev/net/tun

If modprobe fails, open a ticket — the guest may not have the device allowed.

Bash

echo tun | tee /etc/modules-load.d/tun.conf

Reboot once to prove it survives.

Install OpenVPN from your distribution, drop server.conf in /etc/openvpn/, and enable the systemd unit.

Bash

apt update && apt install -y openvpn
systemctl enable --now openvpn

Open UDP 1194 (or the port you chose) on the firewall.

TUN is layer 3 and what most people want. TAP is Ethernet bridging and heavier. Use TUN unless you have a reason not to.