如何选择vpn服务器软件

Life is short , play more!
本文来自lihao's Blog,转载请注明。

经常需要查阅资料的人们, 除了用代理, 使用vpn是最方便了. 不需要设代理, 可以数据加密. 不怕留下尾巴.

vpn大家都知道Virtual Private Network. 由于我们不可能搭建自己的专线, 所以利用现有的internet网络资源, 搭建自己的私有网络链路.  那就是vpn了. 为了安全,可以使用一些加密协议. 如果我们购买了vps空间, 可以自己搭建专署自己的vpn server.

常见的vpn安全协议有,  ipsec,ssl, cisco 的DTLS, 还有ssh(哈,这个我也是刚查资料才知道的. 好强大的openssh). 不要忘了还有windows 阵营,  Microsoft Point-to-Point Encryption (MPPE) ( 通过pppd 协议)


开源的vpn软件有 :

n2n , Openswan,  OpenVPN , Social VPN , strongSwan, tcpcrypt, tinc, Cloudvpn, Vyatta

一  基于ssl安全协议的. 我们非常熟悉有  openvpn(ssl) 官方网站被中国地区封锁了.  不过仍然可以从其它的镜像下载.

二  基于ipsec 安全协议的, 在linux中有如下的软件可以使用.

1. FreeS/WAN: this was the first IPsec implementation available for Linux. However, FreeS/WAN is no longer in active development. It forked into Openswan and strongSwan.

2. Openswan is maintained by former FreeS/WAN team members who have started the company Xelerance.

3. strongSwan is also a continuation of FreeS/WAN. StrongSwan’s principal author is Andreas Steffen, the creator of the X.509 certificate patch for FreeS/WAN. Not surprisingly, its main focus is on good certificate and smartcard support.StrongSwan is sponsored by Astaro.

4. Kernel 2.6+ contains a native IPsec implementation, which is known as “NETKEY”, “26sec” or “PF_KEY”. This means that recent distributions ship with IPsec support out of the box.

5. ipsec-tools is based on KAME and used by default on many distributions. Its IKE daemon is called racoon.  ( 很多linux发行版默认安装 ipsec-tools )

6. isakmpd: there is a Linux port of OpenBSD’s ISAKMP daemon.

三/ windows的MPPE vpn安全协议, 我们只需要linux中安装ppptd 服务, 简单的配置即可使用.


发表评论

电子邮件地址不会被公开。 必填项已用*标注