VPN Server Release , developed as a universal and high-performance alternative to OpenVPN and Microsoft’s VPN products. The code under the Apache 2.0 license.
The project supports a wide range of VPN protocols, allowing the server based on SoftEther VPN to work with native Windows (L2TP, SSTP), macOS (L2TP), iOS (L2TP), and Android (L2TP) clients, as well as serving as a transparent replacement for OpenVPN server. Tools are provided to bypass firewalls and deep packet inspection systems. To complicate tunnel detection, techniques for camouflaged Ethernet tunneling over HTTPS are supported, with a virtual network adapter implemented on the client side and a virtual Ethernet switch on the server side.
Among the changes added in the new release:
- Support added , allowing the creation of third-party applications to manage the VPN server. Through JSON-RPC, you can add users and virtual hubs, terminate specific VPN connections, etc. Code examples for using JSON-RPC are published for JavaScript, TypeScript, and C#. The setting ‘DisableJsonRpcWebApi’ is proposed to disable JSON-RPC;
- Added a built-in web admin console (https://server/admin/), allowing management of the VPN server through a browser. The capabilities of the web interface are currently limited;
- Support for the AEAD mode of block cipher ChaCha20-Poly1305-IETF has been added;
- A function for displaying detailed information about the protocol used in the VPN session has been implemented;
- Resolved in the network bridge driver for Windows, allowing local privilege escalation in the system. The issue appears only in Windows 8.0 and earlier versions when using Local Bridge mode or SecureNAT.
Key SoftEther VPN:
- Support for OpenVPN, SSL-VPN (HTTPS), Ethernet over HTTPS, L2TP, IPsec, MS-SSTP, EtherIP, L2TPv3, and Cisco VPN protocols;
- Support for remote-access and site-to-site connection modes at L2 (Ethernet bridging) and L3 (IP) levels;
- Compatibility with original OpenVPN clients;
- SSL-VPN tunneling via HTTPS allows bypassing firewalls;
- Ability to create tunnels over ICMP and DNS;
- Built-in dynamic DNS and NAT traversal mechanisms to ensure operation on hosts without a permanent dedicated IP address;
- High performance providing a connection speed of 1Gbps without significant requirements for RAM and CPU size;
- Dual IPv4/IPv6 stack;
- Use of AES 256 and RSA 4096 for encryption;
- Presence of a web interface, graphical configurator for Windows, and a cross-platform command-line interface in the style of Cisco IOS;
- Provision of a firewall functioning within the VPN tunnel;
- Ability to authenticate users via RADIUS, NT domain controllers, and X.509 client certificates;
- Presence of a packet inspection mode that allows logging of transmitted packets;
- Support for Windows, Linux, FreeBSD, Solaris, and macOS servers. Clients available for Windows, Linux, macOS, Android, iOS, and Windows Phone.
Source: opennet.ru
