Tunnel networks whose public endpoints are dynamic such as DHCP or dial-in clients,.
Use real-time adaptive link compression and traffic-shaping to manage link bandwidth utilization,.
Use static, pre-shared keys or TLS-based dynamic key exchange,.
Choose between static-key based conventional encryption or certificate-based public key encryption,.
Use any cipher, key size, or HMAC digest (for datagram integrity checking) supported by the OpenSSL library,.
Use all of the encryption, authentication, and certification features of the OpenSSL library to protect your private network traffic as it transits the internet,.
Configure a scalable, load-balanced VPN server farm using one or more machines which can handle thousands of dynamic connections from incoming VPN clients,.
Tunnel any IP subnetwork or virtual ethernet adapter over a single UDP or TCP port,.
Overall, OpenVPN aims to offer many of the key features of IPSec but with a relatively lightweight footprint. OpenVPN is designed to work with the TUN/TAP virtual networking interface that exists on most platforms. OpenVPN also supports non-encrypted TCP/UDP tunnels. OpenVPN supports conventional encryption using a pre-shared secret key (Static Key mode) or public key security (SSL/TLS mode) using client & server certificates. OpenVPN is tightly bound to the OpenSSL library, and derives much of its crypto capabilities from it. OpenVPN supports SSL/TLS security, ethernet bridging, TCP or UDP tunnel transport through proxies or NAT, support for dynamic IP addresses and DHCP, scalability to hundreds or thousands of users, and portability to most major OS platforms. OpenVPN is a robust and highly flexible VPN daemon.
0 kommentar(er)
