VPN WORKSHOP FROM BASICS TO SETUP SLIDES.pdf
- 1. VPN WORKSHOP: “From Basics to Setup”
- 3. What is VPN? A network architecture for virtually extending a private network across one or multiple other networks which are either untrusted or need to be isolated
- 4. The internet is very similar to a postal delivery network!
- 5. The internet is very similar to a postal delivery network!
- 6. Courier Parcel Network Packets
- 7. Imagine that you are Malaysian SPY in the US who wants to deliver evidence and report back to HQ… From: BLUE To: HQ
- 8. You can encrypt your package in another language … から: 自分 に: あなた From: BLUE To: WJPN ... language that could only be understood by a Branch office in Japan
- 9. You can encrypt your package in another language … から: 自分 に: あなた From: BLUE To: WJPN ... language that could only be understood by a Branch office in Japan From: BLUE To: WJPN Put it inside another package, destined to a Branch office in Japan
- 10. から: 自分 に: あなた From: # To: # From: # To: # The Japan Branch then unbox it, decrypt it and send the original package safely to HQ From: # To: #
- 11. から: 自分 に: あなた From: # To: # From: # To: # From: # To: # You can assume the Japan Branch is your home router And HQ is your house in Malaysia
- 12. The "tunnel" concept in VPNs refers to the encrypted connection that is established between your device and the VPN server.
- 13. Why normal people would use VPN? 1. Accessing a network securely while not on the premises 2. Using a public network securely 3. Tricking websites into thinking you are in a different country 4. Avoiding government censorship and unblocking websites
- 14. Accessing a network securely while not on the premises
- 15. Using public network securely
- 16. Tricking websites into thinking you are in a different country
- 17. Site-to-Site VS Remote Access VPN ● This configuration joins one or more computers to a network which cannot be directly connected ● Each client is in charge of activating its own tunnel towards the network it wants to join. ● Client software, SSL VPN (browser-based) 1) Remote Access VPN
- 18. Site-to-Site VS Remote Access VPN ● Connect two networks together ● Encryption and decryption is done between two devices (routers / firewall / servers) 1) Site-to-Site VPN
- 19. Common VPN Protocols ● PPTP Microsoft (1999) ● OpenVPN (2001) ● IKEv2 / IPsec (2005) ● SoftEther (2014) ● WireGuard (2016)
- 20. ● Encryption ○ Advanced Encryption Standard (AES) ● Hashing ○ Secure Hashing Algorithm (SHA) ● Authentication ○ Preshared Keys or Certificates ● Anti-Replay ○ Assign serial numbers on packets VPN security functions
- 22. Residential Home Set Up Your router needs to have a public IP Home Router ISP / Internet VPN server VPN tunnel Your remote device
- 23. Residential Home Set Up If your Router is behind a CGNAT you are not reachable from your vpn client, unless your ISP map a port forwarding to your router. VPN server Home Router ISP VPN tunnel Your remote device Internet
- 24. VPN SERVER IN THE CLOUD / VPS Your remote device VPN server ISP Internet
- 26. As a consumer ● Trustworthiness and Privacy Concerns ● Malware and Fake VPNs ● Legal and Policy Considerations
- 27. When managing a self hosted VPN server ● Tunnel Segregation ● Device hardening ● More advanced and complicated authentication methods ○ Multi-factor authentication ○ Digital Certificates ● Keep up with software patch and updates