[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [despammed] Re: VPN: SSH or IPSec???



Ed McMan grabbed a keyboard and typed...
> The VPN howto shows how to use ssh to make a true VPN.  It involves
> ppp, not ssh's port forwarding.  Unfortunately, the howto is very
> dated, and it relies on a software package that is very difficult to
> find.

You do not want to do that. Tunnelling PPP over SSH gives you serious
performance hits you have can reduced with other VPN implementations.

Don't get me wrong--SSH is good for a lot of things--just a VPN is
not one of them. I use SSH every day, and even maintain the SSH FAQ
(okay, so it's out-of-date, but Steve and I are working on that), but
I digress..

Here is a link on why PPP over SSH is a bad idea:
http://sites.inka.de/sites/bigred/devel/tcp-tcp.html

-Anne
-- 
              .-"".__."``".   Anne Carasik, System Administrator
 .-.--. _...' (/)   (/)   ``'   gator at cacr dot caltech dot edu 
(O/ O) \-'      ` -="""=.    ',  Center for Advanced Computing Research    
~`~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Attachment: pgpxdQw95fnQj.pgp
Description: PGP signature


Reply to: