VPN on Windows VPS

What is the point of the VPN?

Combining these two terminologies creates something that could be used in great measure in the IT world, as both technologies have their pros and cons. But what is the point of the VPN? In computer networks and telecommunications, VPN (Virtual Private Network, abbreviated as VPN) is seen as an extension of LANs and protects the safety logic that can be inside a network Local. Putting it simply, you are dealing with regular connections through LAN port, which is set up through specific connections created for secure data transfer. This connection is more commonly known as a ‘tunnel’ connection. The best way to explain this is through an example: When a big company wants to transfer specific data over the network, in more specific case classified data, doing so over an unsecured network is very risky especially with nowadays level of hacking, but still the unsecured network connections are still used as they also have their advantages. Those unsecured network connections are now called Internet. So back to the secured connections, two terminals are being established, each on the other end of the ‘tunnel’. An example of this way of sending data for this type of connection is additional physical cables where set between those locations. These connections were very secure, but the main disadvantage of this separated connection was the low connection speed and very poor reliability.

Tunneling

Then a protocol was created that uses the best of both technologies, both Internet and the individual connections. The ‘tunneling’ protocol was born and it goes like this: To establish a connection between two terminals specific conditions must be fulfilled so it can be completed successfully. The most important condition is key of encryption and decryption of the data that is about to be transferred. The terms are preset between the two locations that is users in a form of personal agreement, whether phone, e-mail or the best option face to face encounter. With that main condition set, the terminal creates an algorithmic encryption (the sender) and then sends the data in the encrypted form through the secured ‘tunnel’ and the only one who can decrypt the data is the terminal on the other end (receiver) with the mostly used username and password combination to decrypt it, but there are other ways much more sophisticated… This network is “virtual” in nature, because it connects two networks ‘physical’ (LANs) by a connection unreliable (Internet) and private computers only because of local networks on both sides of the VPN can access the data. This protocol had as a result a great cost cut when connections where made between the two locations. Thus, when a system outside a private network (client nomadic, agency or home worker) wants to connect to the corporate network:

• The packages (which contain the data) is encrypted by the VPN client (according to the algorithm decided by both partners in establishing the VPN tunnel) and possibly signed.
• They are transmitted via the carrier network (the Internet in general).
• They are received by the VPN server that decrypts and processes if the required verifications are correct.
• In this century, most telecom operators have adopted MPLS for the implementation of a service a little abusively called VPN for not offering privacy without encryption.
  
  
  
  Putting it in simple VPN is a product of the ‘tunneling’ protocol that allows people from one side to send data over a secured line through encryption, to the other side. Here are the most commonly known protocols and the most used ones:
  • GRE, L2TP often replaced by, developed by Cisco.
  • PPTP (Point-to-Point Tunneling Protocol) is a layer 2 protocol developed by Microsoft, 3Com, Ascend, U.S. Robotics and ECI Telematics.
  • L2F (Layer Two Forwarding) is a layer 2 protocol developed by Cisco Systems, Nortel and Shiva. It is now almost obsolete.
  • L2TP (Layer Two Tunneling Protocol) is the culmination of the IETF (RFC 3931) to converge the features of PPTP and L2F. It is thus a layer 2 protocol based on PPP.
  • IPsec is a layer 3 protocol, based on the work of the IETF, to transport encrypted data to IP networks.
  • SSL / TLS provides a very good solution for tunneling. The advantage of this solution is to use a Web browser as a client VPN.
  • SSH, initially known as a secure replacement for telnet, offers the possibility of tunneling TCP connections, thus allowing access to safe services available on a secure network, without creating a virtual private network in the full sense. However, since version 4.3, OpenSSH software used to create tunnels between two virtual network interfaces to Level 3 (IP routing traffic alone, interfaces TUN) or Level 2 (all Ethernet traffic interfaces TAP). However, OpenSSH only supports the creation of these tunnels, management (routing, addressing, bridging, etc.), that is to say, the creation of VPN tunnels using these, remaining the responsibility of the user.
  • VPN-Q Quarantine connections allow an authenticated user to isolate and inspect its configuration to see if it presents no risk (if necessary to achieve compliance – patches, antivirus, firewall etc.). Then, and only if it complies it will have access to the internal network of the company. The addition of the inspection station can significantly reduce the risk of attacks against the VPN. On the walkway Microsoft ISA Server, the technology is called VPN Quarantine (VPN-Q). Automation is achieved through software QSS (Quarantine Security Suite). Microsoft provides the NAP service that allows it to do the same thing also on the cable networks (switches, etc.) and Secure Wi-Fi.

There is a large number of software’s that creates this kind of connections making it easier to set up this type of connection for transferring data between the two or more locations. The most famous one is probably OpenVPN, as this is freeware software. OpenVPN is compatible with almost every windows environment and communication technology and protocol that exists.

Remote Desktop Connection

Another example of VPN usage is the more and more used Remote Desktop Connection. This very simple example of creating a VPN connection as both sides must have usernames and passwords of each other, depending on the type of connection that you are using. However, security of important data can’t be vouched in this type of connections. This is where VPS come in handy. Using VPN in combination with VPS ensures security on a much greater level then by simply using this type of programs on their own. With a private server, predetermined conditions of encryption (not in an electronic form), the chances of your data being exposed is put down to minimum.

TAGS: