[Cloud Computing]Mechanisms: Virtual Private Network

本文介绍了虚拟私有网络(VPN)的基本概念和技术细节,包括如何使用公共电信基础设施为用户提供安全的连接,通过加密确保数据传输的安全。文中还讨论了三种常见的VPN架构:网关到网关、主机到网关及主机到主机,并提到了IPsec等关键技术和协议。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

Virtual Private Network

The virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide consumers with secure connections to their organization’s network. The VPN ensures privacy through security procedures and tunneling protocols, including the Layer Two Tunneling Protocol (L2TP). Data is encrypted at the sending end for transmission and decrypted at the receiving end.

Figure 1 - A virtual private network established between two clouds.

Figure 1 shows two firewalls establishing a VPN between two clouds. They first exchange each other's certificates and use asymmetric encryption to securely exchange keying material to establish efficient symmetric key encryption. IPsec is a framework of open standards for private communications over public networks. It is a network layer security control that is used to create the VPN.

There are three VPN architectures:

  • The gateway-to-gateway architecture protects communications between two networks, such as an organization's on-premise network and the organizations cloud resources.
  • The host-to-gateway architecture protects communications between one or more individual hosts and a network. The host-to-gateway model is used to allow hosts on unsecured networks, such as traveling employees and telecommuters, to gain access to internal organizational services.
  • The host-to-host architecture protects communication between two specific computers. It is used when a small number of users need to use or administer a remote system that requires the use of inherently insecure communications protocols.

Related Patterns:

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值