Comparison of VPN Security
-
In the light of Snowden revelations on security, a review of VPN Security.
-
That article is from 2013 I believe. Still relevant, but dated.
-
Very good article. I saw it once before and couldn't find it again. Thanks for that!
And as JaredBusch said - very much relevant.
-
"Thankfully" VPNs are not a fast moving target. The basics have remained the same for a very long time.
-
There's a new VPN-type thing that I've seen that seems a bit more like Pertino than anything else... it's called ZeroTier (http://www.zerotier.com).
I am toying around with it to see what it is like. So far, it seems kinda cool. Works with Windows, Linux, and Mac. Android ports are forthcoming, I think.
-
Will have to check that out. Post a write up on it if you can. That would be great.
-
Technical details for those interested... https://www.zerotier.com/tech_faq.shtml
-
Nice, that has some amazing technology behind it. It's not like Pertino, Pertino is a cloud VPN (everything flows through the cloud components so that applications, management, monitoring, etc. can happen), ZeroTier instead uses a cloud controller just to set up peer to peer connections so the machines talk directly to each other.
-
@scottalanmiller said:
Nice, that has some amazing technology behind it. It's not like Pertino, Pertino is a cloud VPN (everything flows through the cloud components so that applications, management, monitoring, etc. can happen), ZeroTier instead uses a cloud controller just to set up peer to peer connections so the machines talk directly to each other.
And it looks like you can completely host it yourself and the software is all free.
-
I had it on my home server and my laptop, but I never really take my laptop anywhere these days... Installing it in VM now at the office to see how well it works remotely.
-
Installing a controller some place like Digital Ocean might be the best for this type of product, it's completely outside of your normal network, no NATing issues to worry about when connecting to the controller, etc.
-
I also like the fact that you have to manually approve devices joining your network... You still get some relative peace of mind that you know what is connected to your network.
Browsing files and remote desktop seem to work pretty good remotely as well... I like the way it works... So if we decide to have an ML Game night, everybody can load up this, and join my network, and then we can all play $game 8-)
-
I thought the controller stuff was hosted on their web site. In order to create and manage a ZT Network, you do have to create an account with them. (I'd already done so).
-
@dafyre said:
I thought the controller stuff was hosted on their web site. In order to create and manage a ZT Network, you do have to create an account with them. (I'd already done so).
That's how they make their money according to the FAQ - but you don't have to use their hosted controllers if you don't want - again, I read that in the FAQ.
-
@Dashrender said:
And it looks like you can completely host it yourself and the software is all free.
Yes, looks very interesting.
-
I'm reading the same FAQ, lol... Again.
I see it now. I dunno how I missed that the first time...but it seems to set up your own controller, you need to compile it yourself as well. But still that's a small price to pay to keep things under your control.... andI already have a C@C server... Hmm... lol.
-
@dafyre said:
I'm reading the same FAQ, lol... Again.
I see it now. I dunno how I missed that the first time...but it seems to set up your own controller, you need to compile it yourself as well. But still that's a small price to pay to keep things under your control.... andI already have a C@C server... Hmm... lol.
LOL - yeah me to... though I wonder if it would be able to handle it.. lol
-
@dafyre said:
I'm reading the same FAQ, lol... Again.
I see it now. I dunno how I missed that the first time...but it seems to set up your own controller, you need to compile it yourself as well. But still that's a small price to pay to keep things under your control.... andI already have a C@C server... Hmm... lol.
Just want you want in a VPN, not reliable.
-
@Dashrender Ha ha ha ha. Ain't but one way to find out. I think they do pretty good with the network bandwidth, as long as nobody cuts their only fiber coming in.
But yea, disk IO still leaves a bit to be desired, lol.
-
@scottalanmiller I'll run it in a VM on my home network if I have to, lol. My cable connection has gone down... zero times (maybe one) in the last year for reasons that were not human error or power related... I gotta move that cable modem and wireless unit away from where my kid can get to it, lol.
