[nylug-talk] Clean Slate Remote Office Connectivity

[alex at pilosoft.com]

On Sat, 21 Apr 2007, Eric wrote:

> I dont know why you refer to OpenVPN as a "ghetto fabulous" solution.
> It's not some ssh/netfilter hack.  It is a robust solution that works,
> and works well across many platforms.
When I can buy an appliance that supports a gbit or two of hw-accelerated
encrypted openvpn traffic, then it'll become a proper solution.

In words of Vijay Gill: "it does not scale".

> IPSEC is a notoriously finicky beast with many different implementations
> that would be more complex to support after you are gone or fired.
Yes, its tricky and can be a b*(@# to get to work. However, it is
supported by your favorite router vendors, and OS vendors.

> Have you ever even used OpenVPN alex?
Yes, works wonderful tunneling out of heavily-firewalled enterprise
offices over udp/53 :)