Overall, it aims to offer many of the key features of IPSec but with a relatively lightweight footprint. OpenVPN is designed to work with the TUN/TAP virtual networking interface that exists on most platforms. Additionally it supports unencrypted TCP/UDP tunnels. It supports conventional encryption using a pre-shared secret key (Static Key mode) or public key security ( SSL/TLS mode) using client & server certificates. OpenVPN is tightly bound to the OpenSSL library, and derives much of its crypto capabilities from it.
Additionally it has support for dynamic IP addresses and DHCP, scalability to hundreds or thousands of users, and portability to most major OS platforms. It supports SSL/TLS security, Ethernet bridging, TCP or UDP tunnel transport through proxies or NAT. OpenVPN is a robust and highly flexible VPN daemon. For more detailed information, please see the OpenVPN 2.4 man page and the OpenVPN documentation. This article describes a basic installation and configuration of OpenVPN, suitable for private and small business use.
0 kommentar(er)
