Comparison of VPN Security
-
"Thankfully" VPNs are not a fast moving target. The basics have remained the same for a very long time.
-
There's a new VPN-type thing that I've seen that seems a bit more like Pertino than anything else... it's called ZeroTier (http://www.zerotier.com).
I am toying around with it to see what it is like. So far, it seems kinda cool. Works with Windows, Linux, and Mac. Android ports are forthcoming, I think.
-
Will have to check that out. Post a write up on it if you can. That would be great.
-
Technical details for those interested... https://www.zerotier.com/tech_faq.shtml
-
Nice, that has some amazing technology behind it. It's not like Pertino, Pertino is a cloud VPN (everything flows through the cloud components so that applications, management, monitoring, etc. can happen), ZeroTier instead uses a cloud controller just to set up peer to peer connections so the machines talk directly to each other.
-
@scottalanmiller said:
Nice, that has some amazing technology behind it. It's not like Pertino, Pertino is a cloud VPN (everything flows through the cloud components so that applications, management, monitoring, etc. can happen), ZeroTier instead uses a cloud controller just to set up peer to peer connections so the machines talk directly to each other.
And it looks like you can completely host it yourself and the software is all free.
-
I had it on my home server and my laptop, but I never really take my laptop anywhere these days... Installing it in VM now at the office to see how well it works remotely.
-
Installing a controller some place like Digital Ocean might be the best for this type of product, it's completely outside of your normal network, no NATing issues to worry about when connecting to the controller, etc.
-
I also like the fact that you have to manually approve devices joining your network... You still get some relative peace of mind that you know what is connected to your network.
Browsing files and remote desktop seem to work pretty good remotely as well... I like the way it works... So if we decide to have an ML Game night, everybody can load up this, and join my network, and then we can all play $game 8-)
-
I thought the controller stuff was hosted on their web site. In order to create and manage a ZT Network, you do have to create an account with them. (I'd already done so).
-
@dafyre said:
I thought the controller stuff was hosted on their web site. In order to create and manage a ZT Network, you do have to create an account with them. (I'd already done so).
That's how they make their money according to the FAQ - but you don't have to use their hosted controllers if you don't want - again, I read that in the FAQ.
-
@Dashrender said:
And it looks like you can completely host it yourself and the software is all free.
Yes, looks very interesting.
-
I'm reading the same FAQ, lol... Again.
I see it now. I dunno how I missed that the first time...but it seems to set up your own controller, you need to compile it yourself as well. But still that's a small price to pay to keep things under your control.... andI already have a C@C server... Hmm... lol.
-
@dafyre said:
I'm reading the same FAQ, lol... Again.
I see it now. I dunno how I missed that the first time...but it seems to set up your own controller, you need to compile it yourself as well. But still that's a small price to pay to keep things under your control.... andI already have a C@C server... Hmm... lol.
LOL - yeah me to... though I wonder if it would be able to handle it.. lol
-
@dafyre said:
I'm reading the same FAQ, lol... Again.
I see it now. I dunno how I missed that the first time...but it seems to set up your own controller, you need to compile it yourself as well. But still that's a small price to pay to keep things under your control.... andI already have a C@C server... Hmm... lol.
Just want you want in a VPN, not reliable.
-
@Dashrender Ha ha ha ha. Ain't but one way to find out. I think they do pretty good with the network bandwidth, as long as nobody cuts their only fiber coming in.
But yea, disk IO still leaves a bit to be desired, lol.
-
@scottalanmiller I'll run it in a VM on my home network if I have to, lol. My cable connection has gone down... zero times (maybe one) in the last year for reasons that were not human error or power related... I gotta move that cable modem and wireless unit away from where my kid can get to it, lol.
-
According to this article, some vpn services has been compromised and accused in customers’ data exchange with the government. Is it possible to provide the list of these vpn providers? It will be really useful to know them and subscribe for another vpn if it’s necessary. Nevertheless, all providers assure that they do not keep log and do not provide any info to a third party of course (eg. https://myipservices.com/blog/what-you-need-know-when-choosing-vpn-platform). So, how to choose a truly anonymous service and not be tricked?
-
@matt said in Comparison of VPN Security:
According to this article, some vpn services has been compromised and accused in customers’ data exchange with the government. Is it possible to provide the list of these vpn providers? It will be really useful to know them and subscribe for another vpn if it’s necessary. Nevertheless, all providers assure that they do not keep log and do not provide any info to a third party of course (eg. https://myipservices.com/blog/what-you-need-know-when-choosing-vpn-platform). So, how to choose a truly anonymous service and not be tricked?
Large, well known VPN providers is generally key. That's true for many security concerns. And, of course, running your own is a major thing to do.
-
We recently had to set up an L2TP tunnel for our apple devices, since the last iOS 10 update took PPTP out of the picture. It was a huge PITA too, because I didn't figure out for a while that the secondary tunnel wouldn't let me reuse existing user accounts in our Watchguard.... that was some fun trial and error. And the WG how-tos never specified anything about needing different user accounts. It sucks to do all the steps right and then get login errors... makes ya feel like an amateur.
