4 ms·
Why not use the openconnect vpn server, ocserv? [0] It opportunistically uses DTLS over UDP where it can, but falls back to plain TLS over TCP where not. And I
by amaccuish 4y ago
Why not use the openconnect vpn server, ocserv? [0]
It opportunistically uses DTLS over UDP where it can, but falls back to plain TLS over TCP where not. And I mean real TLS, not the sort-of-TLS that OpenVPN uses.
[0] https://ocserv.gitlab.io/www/index.html https://ocserv.gitlab.io/www/index.html
- ranger_danger 4y agoHow is OpenVPN sort-of TLS? You can even use it behind a normal HTTPS reverse proxy.
- amaccuish 4y agoIt does some things differently than what a normal browser-based TLS connection does. There's some background here: https://subscription.packtpub.com/book/networking-and-servers/9781783553136/1/ch01lvl1sec12/openvpn-internals https://subscription.packtpub.com/book/networking-and-server...