如何选择vpn服务器软件

经常需要查阅资料的人们, 除了用代理, 使用vpn是最方便了. 不需要设代理, 可以数据加密. 不怕留下尾巴.

vpn大家都知道Virtual Private Network. 由于我们不可能搭建自己的专线, 所以利用现有的internet网络资源, 搭建自己的私有网络链路.  那就是vpn了. 为了安全,可以使用一些加密协议. 如果我们购买了vps空间, 可以自己搭建专署自己的vpn server.

常见的vpn安全协议有,  ipsec,ssl, cisco 的DTLS, 还有ssh(哈,这个我也是刚查资料才知道的. 好强大的openssh). 不要忘了还有windows 阵营,  Microsoft Point-to-Point Encryption (MPPE) ( 通过pppd 协议)

开源的vpn软件有 :

n2n , Openswan,  OpenVPN , Social VPN , strongSwan, tcpcrypt, tinc, Cloudvpn, Vyatta

一  基于ssl安全协议的. 我们非常熟悉有  openvpn(ssl) 官方网站被中国地区封锁了.  不过仍然可以从其它的镜像下载.

二  基于ipsec 安全协议的, 在linux中有如下的软件可以使用.

1. FreeS/WAN: this was the first IPsec implementation available for Linux. However, FreeS/WAN is no longer in active development. It forked into Openswan and strongSwan.

2. Openswan is maintained by former FreeS/WAN team members who have started the company Xelerance.

3. strongSwan is also a continuation of FreeS/WAN. StrongSwan’s principal author is Andreas Steffen, the creator of the X.509 certificate patch for FreeS/WAN. Not surprisingly, its main focus is on good certificate and smartcard support.StrongSwan is sponsored by Astaro.

4. Kernel 2.6+ contains a native IPsec implementation, which is known as “NETKEY”, “26sec” or “PF_KEY”. This means that recent distributions ship with IPsec support out of the box.

5. ipsec-tools is based on KAME and used by default on many distributions. Its IKE daemon is called racoon.  ( 很多linux发行版默认安装 ipsec-tools )

6. isakmpd: there is a Linux port of OpenBSD’s ISAKMP daemon.

三/ windows的MPPE vpn安全协议, 我们只需要linux中安装ppptd 服务, 简单的配置即可使用.

此篇文章已被阅读3011 次