舉報

會員
OpenVPN 2 Cookbook
Jan Just Keijser 著
更新時間:2021-04-09 22:06:17
開會員,本書免費讀 >
最新章節:
Index
Thisisacookbook,withpracticalrecipesprovidingtipsandtrickstothemostcommonproblemsandscenariosfacedwithOpenVPN.ThisbookisidealforsystemadministratorsandnetworkingprofessionalswhoareinterestedinbuildingsecureVPNsusingOpenVPN.ItispreferablethatthereaderhasabasicknowledgeofOpenVPN,aswellasgeneralnetworkadministrationskills.
最新章節
- Index
- New for 2.2: the 'x509_user_name' parameter
- OCSP support
- Handing out the public IPs
- Routing features: redirect-private allow-pull-fqdn
- Port sharing with an HTTPS server
品牌:中圖公司
上架時間:2021-04-09 18:15:05
出版社:Packt Publishing
本書數字版權由中圖公司提供,并由其授權上海閱文信息技術有限公司制作發行
- Index 更新時間:2021-04-09 22:06:17
- New for 2.2: the 'x509_user_name' parameter
- OCSP support
- Handing out the public IPs
- Routing features: redirect-private allow-pull-fqdn
- Port sharing with an HTTPS server
- Connection blocks
- Inline certificates
- Chapter 12. New Features of OpenVPN 2.1 and 2.2
- IP-less setups (ifconfig-noexec)
- Using dyndns
- Connecting via an HTTP proxy with authentication
- Connecting via an HTTP proxy
- Connecting using a SOCKS proxy
- Details of ifconfig-pool-persist
- Multiple remotes and remote-random
- Including configuration files in config files
- Chapter 11. Advanced Configuration
- Windows: routing methods
- Windows: public versus private network adapters
- Windows: running OpenVPN as a service
- Windows: updating the DNS cache
- Windows: using the CryptoAPI store
- Windows Vista/7: elevated privileges
- MacOS: using Tunnelblick
- Linux: using 'pull-resolv-conf'
- Linux: using NetworkManager
- Chapter 10. OS Integration
- Analyzing performance using tcpdump
- Tuning TCP-based connections
- Tuning UDP-based connections
- Traffic shaping
- Compression tests
- OpenSSL cipher speed
- Optimizing performance using 'iperf'
- Optimizing performance using 'ping'
- Chapter 9. Performance Tuning
- Failure when redirecting the default gateway
- Understanding the 'MULTI: bad source' warnings
- Troubleshooting client-to-client traffic routing
- Routing and permissions on Windows
- Source routing
- All clients function except the OpenVPN endpoints
- Missing return routes when 'iroute' is used
- The missing return route
- Chapter 8. Troubleshooting OpenVPN: Routing
- How to read the OpenVPN log files
- Troubleshooting 'client-config-dir' issues
- Troubleshooting network connectivity
- Troubleshooting MTU and tun-mtu issues
- Key mismatches
- Compression mismatches
- TUN versus TAP mismatches
- Cipher mismatches
- Chapter 7. Troubleshooting OpenVPN: Configurations
- Using the PAM authentication plugin
- Using the 'down-root' plugin
- Script security and logging
- Script order
- Using an 'auth-user-pass-verify' script
- Using a 'tls-verify' script
- Using a 'learn-address' script
- Using client-connect/client-disconnect scripts
- Windows login greeter
- Using a client-side up/down script
- Chapter 6. Scripting and Plugins
- Pin caching example
- Private method for getting a PKCS#11 certificate
- Generating a key on the hardware token
- Selecting a PKCS#11 certificate using the management interface
- Using the management interface to list PKCS#11 certificates
- Using a hardware token
- Getting a hardware token ID
- Initializing a hardware token
- Chapter 5. Two-factor Authentication with PKCS#11
- Multiple CAs: stacking using --capath
- Intermediary CAs
- Checking expired/revoked certificates
- The use of CRLs
- Revoking certificates
- OpenSSL tricks: x509 pkcs12 verify output
- xCA : a GUI for managing a PKI (Part 2)
- xCA: a GUI for managing a PKI (Part 1)
- Certificate generation
- Chapter 4. PKI Certificates and OpenSSL
- Management interface
- Using the status file
- External DHCP server
- Checking broadcast and non-IP traffic
- Bridging—Windows
- Bridging—Linux
- Enabling client-to-client traffic
- Simple configuration—non-bridged
- Chapter 3. Client-server Ethernet-style Networks
- Proxy-arp
- Management interface
- Using the status file
- Using an 'ifconfig-pool' block
- Redirecting the default gateway
- Routing: subnets on both sides
- Using 'client-config-dir' files
- Server-side routing
- Simple configuration
- Setting up the public and private keys
- Chapter 2. Client-server IP-only Networks
- 3-way routing
- Complete site-to-site setup
- Configuration files versus the command-line
- Routing
- Plaintext tunnel
- Multiple secret keys
- OpenVPN secret keys
- Shortest setup possible
- Chapter 1. Point-to-Point Networks
- Customer support
- Reader feedback
- Conventions
- Who this book is for
- What you need for this book
- Preface
- Support files eBooks discount offers and more
- About the Reviewers
- About the Author
- Credits
- 版權頁
- 封面
- 封面
- 版權頁
- Credits
- About the Author
- About the Reviewers
- Support files eBooks discount offers and more
- Preface
- What you need for this book
- Who this book is for
- Conventions
- Reader feedback
- Customer support
- Chapter 1. Point-to-Point Networks
- Shortest setup possible
- OpenVPN secret keys
- Multiple secret keys
- Plaintext tunnel
- Routing
- Configuration files versus the command-line
- Complete site-to-site setup
- 3-way routing
- Chapter 2. Client-server IP-only Networks
- Setting up the public and private keys
- Simple configuration
- Server-side routing
- Using 'client-config-dir' files
- Routing: subnets on both sides
- Redirecting the default gateway
- Using an 'ifconfig-pool' block
- Using the status file
- Management interface
- Proxy-arp
- Chapter 3. Client-server Ethernet-style Networks
- Simple configuration—non-bridged
- Enabling client-to-client traffic
- Bridging—Linux
- Bridging—Windows
- Checking broadcast and non-IP traffic
- External DHCP server
- Using the status file
- Management interface
- Chapter 4. PKI Certificates and OpenSSL
- Certificate generation
- xCA: a GUI for managing a PKI (Part 1)
- xCA : a GUI for managing a PKI (Part 2)
- OpenSSL tricks: x509 pkcs12 verify output
- Revoking certificates
- The use of CRLs
- Checking expired/revoked certificates
- Intermediary CAs
- Multiple CAs: stacking using --capath
- Chapter 5. Two-factor Authentication with PKCS#11
- Initializing a hardware token
- Getting a hardware token ID
- Using a hardware token
- Using the management interface to list PKCS#11 certificates
- Selecting a PKCS#11 certificate using the management interface
- Generating a key on the hardware token
- Private method for getting a PKCS#11 certificate
- Pin caching example
- Chapter 6. Scripting and Plugins
- Using a client-side up/down script
- Windows login greeter
- Using client-connect/client-disconnect scripts
- Using a 'learn-address' script
- Using a 'tls-verify' script
- Using an 'auth-user-pass-verify' script
- Script order
- Script security and logging
- Using the 'down-root' plugin
- Using the PAM authentication plugin
- Chapter 7. Troubleshooting OpenVPN: Configurations
- Cipher mismatches
- TUN versus TAP mismatches
- Compression mismatches
- Key mismatches
- Troubleshooting MTU and tun-mtu issues
- Troubleshooting network connectivity
- Troubleshooting 'client-config-dir' issues
- How to read the OpenVPN log files
- Chapter 8. Troubleshooting OpenVPN: Routing
- The missing return route
- Missing return routes when 'iroute' is used
- All clients function except the OpenVPN endpoints
- Source routing
- Routing and permissions on Windows
- Troubleshooting client-to-client traffic routing
- Understanding the 'MULTI: bad source' warnings
- Failure when redirecting the default gateway
- Chapter 9. Performance Tuning
- Optimizing performance using 'ping'
- Optimizing performance using 'iperf'
- OpenSSL cipher speed
- Compression tests
- Traffic shaping
- Tuning UDP-based connections
- Tuning TCP-based connections
- Analyzing performance using tcpdump
- Chapter 10. OS Integration
- Linux: using NetworkManager
- Linux: using 'pull-resolv-conf'
- MacOS: using Tunnelblick
- Windows Vista/7: elevated privileges
- Windows: using the CryptoAPI store
- Windows: updating the DNS cache
- Windows: running OpenVPN as a service
- Windows: public versus private network adapters
- Windows: routing methods
- Chapter 11. Advanced Configuration
- Including configuration files in config files
- Multiple remotes and remote-random
- Details of ifconfig-pool-persist
- Connecting using a SOCKS proxy
- Connecting via an HTTP proxy
- Connecting via an HTTP proxy with authentication
- Using dyndns
- IP-less setups (ifconfig-noexec)
- Chapter 12. New Features of OpenVPN 2.1 and 2.2
- Inline certificates
- Connection blocks
- Port sharing with an HTTPS server
- Routing features: redirect-private allow-pull-fqdn
- Handing out the public IPs
- OCSP support
- New for 2.2: the 'x509_user_name' parameter
- Index 更新時間:2021-04-09 22:06:17