What https-based vpn is advized ?

I want to set up a HTTPS-based VPN. What S/W to use? openswan, openvpn,
freeswan, something else ?

Thanks a lot,
Ton

Ton 't Lam wrote:

> I want to set up a HTTPS-based VPN.

Why on earth would you want to do that? HTTP is stateless and every
transaction must be client initiated, it would be really rather an
inefficient protocol to try to send generic network traffic over.

--
David Dorward <http://blog.dorward.me.uk/> <http://dorward.me.uk/>
Home is where the ~/.bashrc is

On 2005-09-10, David Dorward <(E-Mail Removed)> wrote:
> Ton 't Lam wrote:
>
>> I want to set up a HTTPS-based VPN.
>
> Why on earth would you want to do that? HTTP is stateless and every
> transaction must be client initiated, it would be really rather an
> inefficient protocol to try to send generic network traffic over.

Easy to answer, without knowing any other facts:

The original poster is behind a restrictive firewall but may use
proxy httpS CONNECT or similar.

--
Marco Dieckhoff
icq# 22243433
GPG Key 0x1A6C95BA -- http://www.frankonia-brunonia.de/keys

Ton 't Lam wrote:

> I want to set up a HTTPS-based VPN. What S/W to use? openswan, openvpn,
> freeswan, something else ?

I believe you mean SSL based? If so, you can use OpenVPN.

Ton 't Lam wrote:
> I want to set up a HTTPS-based VPN. What S/W to use? openswan, openvpn,
> freeswan, something else ?
>
> Thanks a lot,
> Ton

Indeed, I'm behind a restrictive Firewall. I will use OpenVPN.
Thanks for your replies.

-- Ton

Ton 't Lam wrote:

> Ton 't Lam wrote:
>> I want to set up a HTTPS-based VPN. What S/W to use? openswan, openvpn,
>> freeswan, something else ?
>>
>> Thanks a lot,
>> Ton
>
> Indeed, I'm behind a restrictive Firewall. I will use OpenVPN.
> Thanks for your replies.

One thing you can do with OpenVPN, is use any UDP (preferred) or TCP port
you wish, so that you can get passed firewalls. However, if you use TCP
port 80 (HTTP) and the firewall uses a proxy for HTTP, you will likely have
problems.

David Dorward <(E-Mail Removed)> wrote in news:dfvalh$lsn$1$8302bc10
@news.demon.co.uk:

> Ton 't Lam wrote:
>
>> I want to set up a HTTPS-based VPN.
>
> Why on earth would you want to do that? HTTP is stateless and every
> transaction must be client initiated, it would be really rather an
> inefficient protocol to try to send generic network traffic over.
>

It is not inefficient. OpenVPN isn't actually sending stuff as HTML, it is
just using the HTTPS (443) tcp port to carry its' TLS encrypted traffic
because it will generally be allowed through corporate firewalls and proxy
servers.

Klazmon.

Llanzlan Klazmon wrote:

>>> I want to set up a HTTPS-based VPN.

>> Why on earth would you want to do that?

> It is not inefficient. OpenVPN isn't actually sending stuff as HTML,

Nor are the majority of bytes transfered over HTTP(S) (gifs, jpegs, pngs,
style sheets, javascript, etc).

> it is just using the HTTPS (443) tcp port

That would be using the port usually used by HTTPS, not actually using HTTPS
though.

--
David Dorward <http://blog.dorward.me.uk/> <http://dorward.me.uk/>
Home is where the ~/.bashrc is