Showing posts with label network. Show all posts
Showing posts with label network. Show all posts

Thursday, 13 March 2014

the DIY home VPN experiment (part four - my Raspberry Pi OpenVPN server)

Part Four: my Raspberry Pi OpenVPN server

Overview

In this post, I'd like to share my most recent home lab project - an OpenVPN server running on my Raspberry Pi. The idea for the DIY home VPN experiment basically came along when I was working on setting up a VPN with my older Linksys router. I wanted to come up with some different ways to run a home lab VPN server. In addition, running it on my Raspberry Pi was a fairly safe and controlled experiment, without running the risk of bricking my router with non-standard firmware.

The concept here is to forward VPN traffic received on the public interface of the Internet router (via incoming TCP port 1194) to the OpenVPN server's interface. The VPN server authenticates the connection, and regulates forwarding traffic to and from various destinations on your private network, based on a defined set of rules. This could include forwarding traffic to your desktop to enable a remote sharing via VNC, RDP, SSH, or other protocol.

Thursday, 13 February 2014

the DIY home VPN experiment (part three - my virtualized OpenVPN server)

Part Three: My Virtualized OpenVPN Server

Overview

In this post, I'd like to share my most recent home lab project - a nested OpenVPN server. I refer to it as nested, because it is running completely within my desktop computer. See the illustration below.

The idea for this project came along when I working on setting up a VPN with my older Linksys router. Basically, I wanted to come up with a way to run a home lab VPN server without requiring any additional hardware, and I wanted to incorporate virtualization into this project. In addition, running it as a VM allows for fairly safe and controlled experimentation, without running the risk of bricking one's router with non-standard firmware.

Monday, 30 December 2013

the DIY home VPN experiment (part one - intro)

Part One: Introduction

It’s been a while since my last blog entry, and I’ve decided to catch you up on some of the projects that I’ve been working on in my home lab. This next series of posts is going to revolve around the do-it-yourself home VPN.

What is a VPN, or virtual private network?

Thursday, 17 October 2013

my highlights from the 2013 VMware Forum Toronto

In reflection, here are some highlights from my day at the 2013 #vmforum in Toronto. 

The day got started with a keynote presented by @ShawnRosemarin of VMware who introduced the phrase 'sweat your assets' or 'sweating your assets' which became the catch phrase of the morning. I understood it to refer to the efficient utilization of our compute, storage, network, and virtual infrastructure. I also enjoyed @jdsherry's presentation, specifically related to cyber threats, zero day, and exfiltration.

For me, the biggest highlight of the day was VMware's breakout session on NSX. This is a very cool technology and I love the concept surrounding it.