In recent months, the army of VPN users has grown significantly. And it's not about lovers to bypass locks and visit prohibited sites, but about those who use a VPN for safe operation (yes, remote work). This is an occasion to once again look at the arsenal of available protocols and compare them from a security point of view.
For starters, a few general points about VPN. VPN usage scenarios can be different, the most popular ones are:
- (, );
- ( );
- VPN Providers ( , ).
VPN — , . "" . — OpenVPN IPSec, WireGuard, . , , .
VPN :
— .
— , . , VPN Providers, , .
— , . — .
— , , -.
, , .
PPTP
Point-to-Point Tunneling Protocol (PPTP) — VPN , , Microsoft.
PPTP — , . TCP, 1723. GRE, ( TCP/UDP). , NAT, , - . , GRE, PPTP ( enhanced GRE), Call ID, , , GRE , . NAT point-to-point GRE. VPN PassTrough. .
PPTP Windows . , PPTP : , , , OpenVPN.
PPTP Microsoft VPN . PPTP, .
, VPN , PPTP , , : , .
SSTP
Secure Socket Tunneling Protocol (SSTP) — Microsoft. PPTP, SSTP VPN, , PPTP, .
SSTP SSL TCP- 443. , , VPN . , SSTP Linux, RouterOS SEIL, Windows-.
SSTP , . , VPN SSTP.
SSTP , VPN , - OpenVPN ( ).
IPsec
Internet Protocol Security (IPsec) — , IP-. SSL, , IPsec , ( OpenVPN).
IPsec L2TP IKEv2, .
IPsec IP-, :
- Authentication Header (AH), ;
- Encapsulating Security Protocol (ESP), , .
IPsec , IPsec (L2TP IKE). , , . IPsec , .
, IPsec L2TP IKEv2.
L2TP/IPsec
Layer 2 Tunneling Protocol (L2TP) 1999 L2F (Cisco) PPTP (Microsoft). L2TP , IPsec. L2TP IPsec , RFC 3193.
L2TP/IPsec ( , PPTP). L2TP/IPsec 3DES AES, , , 3DES , .
L2TP - UDP- 500, , , .
L2TP/IPsec , . L2TP/IPsec , , VPN-.
IKEv2/IPsec
Internet Key Exchange version 2 (IKEv2) IPsec, , Security Associations (SA), RFC 7296. IPsec, L2TP, . IKEv2 Microsoft Cisco, (, OpenIKEv2, Openswan strongSwan).
Mobility and Multi-homing Protocol (MOBIKE) IKEv2 . IKEv2 , Wi-Fi .
IKEv2/IPsec , AES, Blowfish Camellia, 256- .
IKEv2 Perfect Forward Secrecy.
IKEv2 OpenVPN, . IKEv2 , . IKEv2 Windows 7+, Mac OS 10.11+, iOS, Android-.
OpenVPN
OpenVPN — VPN , OpenVPN Technologies. , , VPN. , .
, VPN, OpenVPN. . OpenVPN TCP UDP IPsec , VPN.
OpenVPN , , . VPN- OpenVPN, . TCP UPD : Windows, Mac OS, Linux, Apple iOS, Android.
, .
WireGuard
VPN — WireGuard. IPsec OpenVPN , , .
IP-, WireGuard , UDP . WireGuard :
- Curve25519 ,
- ChaCha20 ,
- Poly1305 ,
- SipHash -,
- BLAKE2 .
WireGuard , OpenVPN, (4 ). , .
( , ). , WireGuard Linux , .. .
WireGuard 1.0.0, WireGuard Linux 5.6. Linux , , - . , WireGuard IPsec OpenVPN .
VPN , , . , , , .
veneramuholovka