VPN

Definition

A Virtual Private Network (VPN) is a technology that creates a secure and encrypted connection over a less secure network, such as the Internet. VPNs are used to protect private web traffic from snooping, interference, and censorship. They can also be used to access region-restricted websites by masking the user’s IP address with one from a different location.

Secure Settings Example

# OpenVPN server configuration example
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
tls-auth ta.key 0
cipher AES-256-CBC
auth SHA256
user nobody
group nogroup
persist-key
persist-tun
keepalive 10 120
comp-lzo no
verb 3

Insecure Settings Example

# OpenVPN server configuration with insecure settings
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
cipher BF-CBC  # Insecure cipher
auth none      # No authentication
comp-lzo yes   # Vulnerable to compression attacks
verb 5         # Excessive verbosity can leak sensitive info