release VPN server , developed as a versatile and high-performance alternative to OpenVPN and Microsoft’s VPN products. The code pod licenciou Apache 2.0.
The project supports a wide range of VPN protocols, allowing the SoftEther VPN server to be used with standard clients on Windows (L2TP, SSTP), macOS (L2TP), iOS (L2TP), and Android (L2TP), as well as serving as a transparent replacement for the OpenVPN server. Tools are provided to bypass firewalls and deep packet inspection systems. To complicate tunnel detection, it also supports the technique of camouflaged Ethernet tunneling over HTTPS, with a virtual network adapter implemented on the client side and a virtual Ethernet switch on the server side.
Among the changes added in the new release:
- Pridaná podpora , which allows the creation of third-party applications to manage the VPN server. Through JSON-RPC, users and virtual hubs can be added, specific VPN connections can be terminated, etc. Code examples for using JSON-RPC are published for JavaScript, TypeScript, and C#. A setting "DisableJsonRpcWebApi" is suggested to disable JSON-RPC;
- A built-in web admin console (https://server/admin/), enabling management of the VPN server through a browser. The capabilities of the web interface are currently limited;
- Support for the AEAD mode of the ChaCha20-Poly1305-IETF block cipher;
- A function has been implemented to display detailed information about the protocol used in the VPN session;
- Opravená in the network bridge driver for Windows, allowing local privilege escalation in the system. The issue only manifests in Windows 8.0 and earlier versions when using Local Bridge or SecureNAT mode.
Kľúčové SoftEther VPN:
- Support for OpenVPN, SSL-VPN (HTTPS), Ethernet over HTTPS, L2TP, IPsec, MS-SSTP, EtherIP, L2TPv3, and Cisco VPN protocols;
- Support for remote-access and site-to-site connection modes at L2 (Ethernet bridging) and L3 (IP) levels;
- Compatibility with original OpenVPN clients;
- SSL-VPN tunneling via HTTPS allows bypassing firewalls;
- Ability to create tunnels over ICMP and DNS;
- Built-in dynamic DNS and NAT bypass mechanisms to ensure operation on hosts without a constant dedicated IP address;
- Vysoký výkon, ktorý zabezpečuje rýchlosť pripojenia 1 Gbps bez výrazných požiadaviek na veľkosť RAM a CPU;
- Dvojitý IPv4/IPv6 zásobník;
- Použitie šifrovania AES 256 a RSA 4096;
- Prítomnosť webového rozhrania, grafického konfigurátora pre Windows a multiplatformného príkazového riadku v štýle Cisco IOS;
- Poskytovanie firewallu, ktorý pracuje v rámci VPN tunela;
- Možnosť autentifikácie používateľov cez RADIUS, ovládacie domény NT a klientské certifikáty X.509;
- Prítomnosť režimu inšpekcie paketov, ktorý umožňuje viesť záznam prenášaných paketov;
- Podpora serverom Windows, Linux, FreeBSD, Solaris a macOS. Prítomnosť klientov pre Windows, Linux, macOS, Android, iOS a Windows Phone.
Zdroj: opennet.ru
