Vpn-ws – A VPN system over websockets • Hacker News Board

Vpn-ws – A VPN system over websockets

#1

Post by unbit » Mon, Nov 17, 2014, 9:09 AM UTC

Vpn-ws – A VPN system over websockets
github.com

Re: Vpn-ws – A VPN system over websockets

#2

Post by noir-york » Mon, Nov 17, 2014, 4:33 PM UTC

What problem does this solve that SSL VPN doesn't? What is the rationale for doing VPN over websockets?

Re: Vpn-ws – A VPN system over websockets

#3

Post by unbit » Mon, Nov 17, 2014, 4:41 PM UTC

noir-york wrote: post #2

What problem does this solve that SSL VPN doesn't? What is the rationale for doing VPN over websockets?

Lot of networks have only access to http/https services, in addition to this you get (for free) all of the authentication mechanisms supported by webservers (like kerberos, radius, ldap and so on ...)

Re: Vpn-ws – A VPN system over websockets

#4

Post by noir-york » Mon, Nov 17, 2014, 5:03 PM UTC

unbit wrote: post #3

noir-york wrote: post #2

What problem does this solve that SSL VPN doesn't? What is the rationale for doing VPN over websockets?

Lot of networks have only access to http/https services, in addition to this you get (for free) all of the authentication mechanisms supported by webservers (like kerberos, radius, ldap and so on ...)

"Lot of networks have only access to http/https services" - indeed, which is what SSL VPN solves.

Re: Vpn-ws – A VPN system over websockets

#5

Post by unbit » Mon, Nov 17, 2014, 5:14 PM UTC

noir-york wrote: post #4

unbit wrote: post #3

Earlier quoted context omitted.

Lot of networks have only access to http/https services, in addition to this you get (for free) all of the authentication mechanisms supported by webservers (like kerberos, radius, ldap and so on ...)

"Lot of networks have only access to http/https services" - indeed, which is what SSL VPN solves.

at this point i have no idea of what an ssl vpn is :). The two kind of them i am aware of are openvpn-like (a custom service running on a tcp/udp port, but not on http) or the ones that are more "proxies" to internal networks. They do not allow to interconnect peers or to use services like bonjour or any other broadcast/multicast technology as they are at an higher layer. Am i missing something ?