2 ms·
> In kernel VPN is giving me a bit of a security heart attack. You may be surprised, then, that most of the standard VPN tech — IPsec, GRE+PPTP, VxLAN, etc. —
by lobster_johnson 10y ago
> In kernel VPN is giving me a bit of a security heart attack.
You may be surprised, then, that most of the standard VPN tech — IPsec, GRE+PPTP, VxLAN, etc. — operate in the kernel (with some help from userland apps for things like IKE).
- artie_effim 10y agosorry - aren't those all protocols and not applications?
- lobster_johnson 10y agoI'm referring to Linux, where the implementations of those protocols are kernel modules. There are user-space implementations, of course, such as Rockhopper (IPsec). But they're not performant.