Search for:

  • Article for your preferred language does not exist. Below is international version of the article.
Available article translations:

[How to] Configure TUN/TAP devices inside a container to install VPN software

Article ID: 696, created on Oct 6, 2008, last review on Sep 12, 2014

  • Parallels Cloud Server 6.0
  • Parallels Virtuozzo Containers for Linux 4.7
  • Parallels Server


Follow the steps below to configure the TUN/TAP device in the container (all actions should be done on hardware node's side):

  1. Make sure the tun module is loaded on the hardware node:

    ~# lsmod | grep tun
    tun                    18979  0

    If the module is not loaded:

    • For RHEL 4/5-based distributions

      Create a separate file /etc/init.d/addtun, link it to the proper runlevel and make it executable:

      ~# cat /etc/init.d/addtun
      /sbin/modprobe tun
      ~# ln -s /etc/init.d/addtun /etc/rc3.d/S10addtun
      ~# chmod +x /etc/init.d/addtun

      At next server reboot tun module should be loaded.

    • For RHEL/CentOS 6.x based distributions

      Create a separate file /etc/sysconfig/modules/vztun.modules to let it load automatically during the boot time:

      ~# cat /etc/sysconfig/modules/vztun.modules
      /sbin/modprobe tun

      This file should be executable. You can make it executable by running:

      ~# chmod +x /etc/sysconfig/modules/vztun.modules

      After that restart Virtuozzo service is required as module tun is supposed to be loaded before the Virtuozzo service is started.

      ~# service vz restart

      To let Virtuozzo acknowledge this module's availability (all containers will be restarted).

    • On SuSE-based systems

      Add the tun module into the MODULES_LOADED_ON_BOOT variable in the /etc/sysconfig/kernel file (it should be processed by the /etc/init.d/boot.loadmodules initialization script).

  2. Allow the container to use the TUN/TAP device:

    ~# vzctl set $CTID --devnodes net/tun:rw --save
  3. Set capability:

    ~# vzctl set $CTID --capability net_admin:on --save
  4. Install VPN software, which requires TUN/TAP interface such as Virtual TUNnel or OpenVPN.

Search words:

up tun device


TUN/TAP device

ca05eaf5b843fbd53589c90d7228a6df 2897d76d56d2010f4e3a28f864d69223 eb0ea3b827d18de2329b6477e24c1d59 909d99074e442b52ce54cc7b31cf065d 177dc6fee28957c8ff798197ff2c6602 bf1c3a170005eae151f49ba2720abde9 3d9560cc94370f9e1bd9256d230e5ee8

Was this article helpful?
Tell us how we may improve it.
Yes No
Server Virtualization
- Parallels Cloud Server
- Parallels Containers for Windows 6.0
- Parallels Virtuozzo Containers
- Parallels Automation
- Parallels Automation for Cloud Infrastructure
- Parallels Business Automation Standard
- Parallels Virtual Automation
- Parallels Plesk Panel Suite
- Web Presence Builder
- Parallels Plesk Automation
- Parallels Small Business Panel
- Value-added Services for Hosters
- Parallels Partner Storefront
Services & Resources
- Cloud Acceleration Services
- Professional Services
- Support Services
- Training & Certification