softether vpn · 2016. 10. 15. · features of softether vpn • free and open-source software. •...
TRANSCRIPT
![Page 1: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/1.jpg)
SoftEther VPN
!報告者:蘇⼰己盛
⽇日期:2014/07/01
![Page 2: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/2.jpg)
Outline
• Inroduction • SoftEther VPN • Features of SoftEther VPN • Architecture of SoftEther VPN • OpenVPN vs. SoftEther VPN • Installation • Benchmark
2
![Page 3: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/3.jpg)
Introduction
• SoftEther VPN Project ‣ Develops and distributes SoftEther VPN ‣ An Open-Source Free Cross-platform Multi-
protocol VPN Program ‣ An academic project form University of Tsukuba
• SoftEther VPN ‣ "SoftEther" means "Software Ethernet” ‣ any personal or commercial use for free charge
3
![Page 4: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/4.jpg)
SoftEther VPN
• An alternative VPN server to existing VPN products ‣ OpenVPN ‣ IPsec ‣ MS-SSTP
• Original strong SSL-VPN protocol ‣ Ultra-optimized SSL-VPN Protocol ‣ very fast throughput ‣ low latency ‣ firewall resistance
4
![Page 5: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/5.jpg)
5
![Page 6: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/6.jpg)
Features of SoftEther VPN• Free and open-source software. • Easy to establish both remote-access
and site-to-site VPN. • SSL-VPN Tunneling on HTTPS to pass
through NATs and firewalls. • Revolutionary VPN over ICMP and VPN
over DNS features. • Resistance to highly-restricted firewall. • Ethernet-bridging (L2) and IP-routing (L3)
over VPN. • Embedded dynamic-DNS and NAT-
traversal so that no static nor fixed IP address is required.
• AES 256-bit and RSA 4096-bit encryptions.
• Sufficient security features such as logging and firewall inner VPN tunnel.
• 1Gbps-class high-speed throughput performance with low memory and CPU usage.6
• Windows, Linux, Mac, Android, iPhone, iPad and Windows Mobile are supported.
• SSL-VPN (HTTPS) and 6 major VPN protocols (OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 and EtherIP) are all supported as VPN tunneling underlay protocols.
• The OpenVPN clone function supports legacy OpenVPN clients.
• IPv4 / IPv6 dual-stack. • The VPN server runs on Windows, Linux,
FreeBSD, Solaris and Mac OS X. • Configure All settings on GUI. • Multi-languages (English, Japanese and
Simplified-Chinese). • No memory leaks. High quality stable codes,
intended for long-term runs. We always verify that there are no memory or resource leaks before releasing the build.
• RADIUS / NT Domain user authentication function • RSA certificate authentication function • Deep-inspect packet logging function • Source IP address control list function • syslog transfer function
![Page 7: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/7.jpg)
Architecture of SoftEther VPN
7
![Page 8: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/8.jpg)
Architecture of SoftEther VPN
8
![Page 9: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/9.jpg)
OpenVPN vs. SoftEther VPN
9
![Page 10: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/10.jpg)
OpenVPN vs. SoftEther VPN
10
![Page 11: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/11.jpg)
Implementation
11
![Page 12: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/12.jpg)
Installation• https://www.digitalocean.com/community/tutorials/
how-to-setup-a-multi-protocol-vpn-server-using-softether
12
![Page 13: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/13.jpg)
Performance
13
![Page 14: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/14.jpg)
Benchmark
14
Mbp
s
0
37.5
75
112.5
150
iperf
L2TP/IPsec
142
69.7
VyOS SoftEther VPN
Mbp
s
0
300
600
900
1200
SSL-VPN Throughput
Relay Directly
746.65
398.11
290.79
155.05
Download Upload
![Page 15: SoftEther VPN · 2016. 10. 15. · Features of SoftEther VPN • Free and open-source software. • Easy to establish both remote-access and site-to-site VPN. • SSL-VPN Tunneling](https://reader034.vdocuments.net/reader034/viewer/2022052616/60a68d18b7998e79f4088671/html5/thumbnails/15.jpg)
Future work
• Compare SSL-VPN with OpenVPN !
• Compare SSL-VPN with VXLAN !
• Compare SSL-VPN with GRE !
• Pass through NATs and firewalls
15