To begin configuration, click the 'Edit' button next to the instance. A new instance with the given name will appear in the "Stunnel Configuration" list. To create a new Stunnel instance, enter a custom name for it and click the 'Add' button. Navigate to the Services → VPN → Stunnel page and enable the "Stunnel Globals" configuration: Take note of the comments that are provided next to fields that differ from the default value:ĭon't forget to click the Save button located at the bottom-right side of the page. The figure below displays the configuration used for our example. To begin configuration, click the 'Edit' button next to the server instance. An OpenVPN server instance with the given name will appear in the "OpenVPN Configuration" list. Select Role: Server, enter a custom name and click the 'Add New' button. Navigate to the Services → VPN → OpenVPN page. The logic of the connection can be visualized like this: The Stunnel server will listen for incoming client connections on the specified TCP port ( 9999 in this example) and connect them to OpenVPN server running on the local host. This provides the possibility to transfer data between remote private networks (LAN A and LAN B) and adds an additional TLS security layer for the connection.įirst, configure the OpenVPN and Stunnel servers. TLS certificates for the server and the client ( for instructions on generating TLS certificates, click here).Īn OpenVPN client is connected to an OpenVPN server (both hosted on RUT routers) via a TLS encrypted Stunnel connection.at least one router (server) with a public IP.two routers of the RUTxxx series (except RUT850).This article contains instructions on how to configure an OpenVPN over Stunnel topology. This procedure increases the security of the established connection and provides higher chances of passing a Deep packet inspection (DPI) check. TLS encryption provided by Stunnel can be used as an additional layer of encryption for data sent by OpenVPN. Stunnel is an open-source a proxy service that adds TLS encryption to clients and servers already existing on a VPN network.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |