Niflheim is a cutting-edge VPN server designed to virtualize private networks across data centers, offering seamless and quick remote access within just a few minutes. It prioritizes the highest levels of security while ensuring top-tier performance, making it an ideal solution for businesses that need to protect sensitive data without compromising on speed or efficiency.
Key Features
-
Support for IKEv2 protocol with strong cryptographic keys (AES-GCM, SHA2, and P-256) for iOS, macOS, and Linux.
-
WireGuard support for all the above platforms, as well as Android and Windows 10.
-
Generation of configuration files (.conf) and QR codes for WireGuard clients on iOS, macOS, Android, and Windows.
-
Creation of Apple profiles for automatic configuration of iOS and macOS devices with IPsec — no client software required.
-
Easy and convenient addition and removal of users.
-
Optional ad blocking via local DNS resolver.
-
DNS-over-HTTPS is enabled by default for all clients and requests.
Warning
Ensure that your security group allows traffic through UDP ports 500, 4500, and 51820.
Warning
Warning! After creating the virtual machine, the process of generating product settings will automatically begin. This typically takes around 5 minutes, depending on the virtual machine’s parameters. During this time, SSH access will be unavailable. This step is crucial to ensure a complete and secure setup.
- Obtain an SSH key pair to connect to the virtual machine (VM).
- Create a VM from a public image. In the Image/Boot Disk Selection section, go to the Cloud Marketplace tab and select niflheim. In the Access section:
- Enter your username in the Login field.
- Paste the contents of your public SSH key into the SSH Key field.
{% note warning %}
You can monitor the installation process through the “Serial Port”.
-
Connect to the VM via SSH.
-
Elevate your privileges to
root
:sudo su
-
Retrieve the administrator password from the
ca-password.txt
file:cat /opt/niflheim/ca-password.txt
-
Obtain the admin credentials for the web UI:
cat /opt/niflheim/admin_access_ui.txt
The web UI is available on port 80.
Ensure you store the CA certificate password and UI admin password securely and avoid placing sensitive information in public repositories.
- Creating VPN tunnels.
- Securely accessing company resources.
- Connecting network infrastructures through a VPN tunnel.
OpenNix provides technical support to users in Yandex Cloud. You can contact technical support by email at support@opennix.ru. Support engineers are available from 9:00 to 18:00 (UTC+3) during business days.