Network architecture for extending a private network through public networks while protecting privacy by encrypting this connection.
Can be used in organisations to grant employees secure access to the internal network without requiring them to be on-site. Can also be used to establish anonymous connections.
Components
A VPN requires:
VPN client: Installed on remote Host used to establish and maintain a VPN connection to the VPN server.VPN server: Computer or network device that accepts VPN connections from VPN clients and routing traffic between VPN clients and the private network.Encryption: Used to secure the connection and protect the transmitted data.Authentication: To verify the VPN client and the VPN host. Can be done with a shared secret or certificate.
Types
Site-To-Site VPN
Both client and server are network devices (typically Routers or firewalls), and share entire network ranges.
Most commonly used to join company networks together, allowing multiple locations to communicate over the Internet as they were local.
Remote Access VPN
The client creates a virtual interface that behaves as if it is on the servers network.
SSL VPN
VPNs that works within a web browser.
Examples
Remote Access VPNs
- OpenVPN
SSL VPNs
Hack the Box’s Pwnbox