nanog mailing list archives

Re: VPN over slow Internet connections


From: Denys Fedoryshchenko <denys () visp net lb>
Date: Fri, 22 Apr 2011 00:47:50 +0300

On Thu, 21 Apr 2011 17:55:32 +0100, Ben Whorwood wrote:
IMHO it is not good idea to go to OpenVPN/IPSec/etc level at all (IP layer at least, and in case of Windows it is also ethernet headers). First of all OpenVPN for Windows/different OS sometimes become a headache and need admin privileges.

If you have just SQL queries and one TCP port to database - just use stunnel. Maybe even easier, if it is custom application, to embed TLS directly to application, and you can still run nice certificate authorization (same TLS), and it will be much more transparent for user.



Current thread: