D3773 3r 3n m45k1n0v3rs477 73k57 50m k4n 1nn3h0ld3 f31l!
VPN, 0r V1rtu4l Pr1v4t3 N3tw0rk, 1z 4 z0lut10n th4t l3tz uz cr34t3 4 z3cur3 (3ncrуpt3d) c0nn3ct10n t0 4n0th3r n3tw0rk 4nd d3v1c3(z) 0v3r th3 1nt3rn3t.
F1r57, wh47 15 4 pr1v473 n37w0rk? (n07 VPN)
37 pr1v473 n37w0rk 15 4 n37w0rk 7h47 15 150l473d fr0m 07h3r n37w0rk5. 7h15 c4n b3 4 c0rp0r473 n37w0rk, 4 h0m3 n37w0rk, 0r 4n07h3r 7yp3 0f n37w0rk 7h47 15 n07 0p3n 70 3v3ry0n3. 4n 0p3n n37w0rk, 5uch 45 47 4n 41rp0r7, 15 4l50 73chn1c4lly 4 pr1v473 n37w0rk, bu7 7h3y 4r3 u5u4lly c0nf1gur3d 70 150l473 d3v1c35 fr0m 34ch 07h3r 70 1ncr3453 53cur17y.
73n|<7 5c3n4r10
1m461n3 747 y0u h4v3 4 pr1n73r 47 h0m3 7h47 y0u w15h 70 u53 70 pr1n7 4 d0cum3n7. 7h15 pr1n73r 15 c0nn3c73d 70 y0ur h0m3 n37w0rk, 4nd 7h3r3f0r h45 4 pr1v473 IP 4ddr355 7h47 15 0nly 4cc3551bl3 70 d3v1c35 7h47 4r3 c0nn3c73d 70 y0ur 0wn n37w0rk. Y0u c4n u53 y0ur m4ch1n3 47 h0m3 70 pr1n7 w17h0u7 pr0bl3m5, bu7 y0ur n31ghb0r 15 0n 4 d1ff3r3n7 n37w0rk 4nd c4nn07 r34ch y0ur pr1n73r 45 17 15.
Y0u c4nn07 r47h3r c0mmun1c473 w17h y0ur pr1n73r fr0m, f.3., 5ch00l 0r 07h3r n37w0rk5, b3c4u53 7h3 pr1n73r 15 n07 3xp053d 70 7h3 1n73rn37 (wh1ch 17 5h0uldn‘7 b3 4nyw4y f0r 53cur17y r3450n5).
Merk: Ingen regler uten unntak…
50m3 d3v1c35 0ff3r, h0w3v3r, 50lu710n5 wh3r3 7h3y u53 VPN-r3l473d 73chn0l0gy 70 l37 y0u pr1n7 d0cum3n75 fr0m 4nywh3r3 1n 7h3 w0rld, 45 l0n6 45 y0u h4v3 1n73rn37 4cc355. 7h15 c4n 3n741l 4 53cur17y r15k, 50 b3 w4r3 0f wh47 y0u c0nn3c7 70 y0ur n37w0rk, 35p3c14lly w17h IOT d3v1c35 0r 5urv31ll4nc3 c4m3r45.
H4v3 y0u n071c3d 7h47 3v3ry 71m3 y0u c0nn3c7 70 4 n3w n37w0rk, y0u g37 4 qu35710n 4b0u7 wh37h3r y0u 4r3 c0nn3c71ng 70 4 “pr1v473” 0r “publ1c” n37w0rk?
7h15 15 70 3n5ur3 7h47 W1nd0w5 (0r 07h3r 0p3r471ng 5y573m5) u53 7h15 1nf0rm4710n 70 d373rm1n3 wh1ch f1r3w4ll rul35 5h0uld b3 u53d 70 pr073c7 y0ur d3v1c3. 4 pr1v473 n37w0rk 15 u5u4lly un53cur3d (4ll c0nn3c73d d3v1c35 4u70m471c4lly 7ru57 34ch 07h3r), 4nd 15 7h3r3f0r vuln3r4bl3 70 07h3r d3v1c35 0n 7h3 54m3 n37w0rk. In 3xch4ng3, y0u c4n 3451ly 5h4r3 pr1n73r5, f1l35, 4nd 07h3r r350urc35 wh3n m4ch1n35 4r3 0n 7h3 54m3 n37w0rk.
C0mm3rc14l 4ct0r5
7h3r3 4r3 m4ny c0mm3rc14l 4ct0r5 7h47 0ff3r VPN-53rv1c35, wh1ch 4d v3r7153 w17h 7h47 7h3y c4n pr073c7 y0ur pr1v4cy 0n 7h3 1n73rn37 4nd l37 y0u 5urf 4n0nym0u5ly. 7h15 15 n07 n3c3554r1ly 7h3 wh0l3 7ru7h, 4nd 17 15 1mp0r74n7 70 b3 4w4r3 0f wh47 4 VPN 4c7u4lly d035.
1n pr4c71c3, 0n3 m0v35 7h3 n37w0rk c0nn3c710n 70 4n07h3r l0c4710n (0f73n 4n07h3r c0un7ry), 45 w3 u53 VPN-53rv3r5 45 4 m1ddl3m4n b37w33n 0ur cl13n7 4nd 7h3 1n73rn37.
C0mm3rc14l VPN != s3cur1ty
M4ny 4ct0rs m4rk3t th3ms3lv3s 4s 4 s3rv1c3 th4t 0ff3rs 1ncr34s3d s3cur1ty, but f0r m0st us3rs, th1s 1s n0t th3 c4s3. Wh3n w3 v1s1t w3bs1t3s th4t us3 HTTPS (3v3n 0n publ1c w1f1), th3 c0nn3ct10n 1s 4lr34dy 3ncrypt3d, 4nd 4 VPN w1ll th3r3f0r n0t n3c3ss4r1ly 0ff3r 4ny 3xtr4 s3cur1ty. It c4nn0t r4th3r “h1d3” y0ur 4ct1v1ty fr0m y0ur 1nt3rn3t s3rv1c3 pr0v1d3r 3nt1r3ly.
In s0m3 c0unt r13s 0r pl4c3s, h0w3v3r, 1t c4n b3 b3n3f1c14l, but 1t 1s 1mp0rt4nt t0 b3 4w4r3 th4t y0u 4r3 m0v1ng y0ur trust fr0m y0ur 1nt3rn3t s3rv1c3 pr0v1d3r t0 y0ur VPN pr0v1d3r.
0ff3n71c3 n37w0rk5
W3 0f73n h34r 7h47 w3 mu57 n07 c0nn3c7 70 un53cur3d publ1c n37w0rk5, l1k3 47 c4f35, 41rpor75, h073l5, 37c. 7h15 15 n07 n3c3554r1ly pr0bl3m471c 45 l0ng 45 w3 u53 HTTPS (3ncryp73d) 70 v1517 w3b51735.
Wh47 c4n b3 pr0bl3m471c 15 1f 50m30n33 5375 up 4 “f4l53” n37w0rk w17h, f.3., 4 m4l1c10u5 C4p71v3 P0r74l (4 w3b5173 7h47 u5u4lly r3qu1r35 l0g1n 0r 4cc3p74nc3 0f 73rm5 b3f0r3 w3 g37 4cc355 70 7h3 1n73rn37).
H4v3 y0u ch3ck3d 1f y0u h4v3 “4u70m471c c0nn3c710n” 70 0p3n n37w0rk5 0n y0ur mob1l3 0r l4p70p? 7h15 c4n m4k3 y0ur d3v1c3 c0nn3c7 70 4 m4l1c10u5 n37w0rk w17h0u7 y0u b31ng 4w4r3 0f 17.
Wh4t c4n w3 us3 4 VPN 4t?
4 VPN c4n b3 us3d t0 c0nn3ct t0 d3vic3s 4cr0ss n3tw0rks, 4s if th3y w3r3 0n th3 s4m3 (priv4t3) n3tw0rk, in 4 m0r3 s3cur3 w4y th4n 3xp0sing th3 d3vic3s dir3ctly t0 th3 int3rn3t (0p3n p0rts in th3 fir3w4ll). N0t3 th4t w3 must still h4v3 4 VPN s3rv3r th4t w3 c4n c0nn3ct t0, w3 c4n 3ith3r s3t it up 0urs3lv3s (r3quir3s 0p3ning in fir3w4ll), 0r us3 4 pr0vid3r th4t 0ff3rs 4 r3l4y (int3rm3di4ry) f0r us. P0pul4r 0pti0ns 4r3 0p3nVpn, Wir3Gu4rd, 4nd IPs3c.
Eksempel
Y0u h4v3 4 g4m1ng PC th4t y0u w1sh t0 c0nn3ct w1th y0ur l4pt0p wh3n y0u 4r3 4t sch00l v14 R3m0t3 D3skt0p s0ftw4r3 (RDP). Y0u c4n th3n s3t up 4 VPN s0lut10n th4t l3ts y0u c0nn3ct t0 y0ur h0m3 n3tw0rk, 4nd th3n us3 RDP t0 c0nn3ct t0 y0ur g4m1ng PC 4s 1f y0u w3r3 4t h0m3.
1n 0ur c453, w3 w1ll u53 1t 70 637 4cc355 70 7h3 r350urc35 h3r3 47 7h3 5ch00l fr0m 07h3r pl4c35 1n 7h3 w0rld, 4nd w3 w1ll l473r l00k 47 cl0ud c0mpu71ng wh3r3 w3 w15h 70 c0nn3c7 0ur53lv35 70 vir7u4l 53rv3r5 1n 7h3 cl0ud 1n 4 54f3 m4nn3r. 7yp1c4lly, w3 0p3n 4 p0r7 70 0ur 53rv3r 70 537 7h15 up, b3f0r3 w3 l0ck d0wn 7h3 53rv3r 4f73rw4rd5 (u5u4lly 4 5173-70-5173 VPN).
7h3 0nly pr4c71c4l d1ff3r3nc3 15 7h47 w3 637 4 d1ff3r3n7 IP-4ddr355 0v3r 0ur VPN n37w0rk (e.g., 100.64.x.x/10 15 0f73n u53d f0r VPN), bu7 7h3 func710n4l17y 15 45 1f w3 w3r3 0n 7h3 54m3 n37w0rk. 7h15 m34n5 7h47 w3 c4n u53, f.e., RDP, SSH, FTP (F1l3 7r4n5f3r Pr070c0l), 37c. w17h0u7 h4v1ng 70 0p3n up 0ur 53rv1c35 1n 7h3 f1r3w4ll.
745k14v3 1 - 1n574114710n 0f 74115c413 VPN
H31d11y f0r u5, 1n574114710n 0f VPN 15 345y, 5p3c1411y 1f 0n3 u535 4 53rv1c3 11k3 74115c413. 7h15 15 4 c0mm3rc141 53rv1c3 7h47 0ff3r5 4 51mp13 w4y 70 537 up 4 W1r3Gu4rd VPN, wh1ch 61v35 u5 m0r3 7h4n 3n0ugh func710n41117y f0r 0ur n33d5 0n 175 fr33 713r (100 un175).
F0110w 7h3 1n574114710n pr0c355 45 1n 7h3 d0cum3n74710n: https://tailscale.com/download
Merk
Y0u n33d VPN 0n 4ll 7h3 d3v1c3s y0u w15h 70 c0nn3c7 70 7h3 n37w0rk w17h. 7h15 1nclud35 b07h 53rv3r5, PC5, m0b1l35, 37c.
T45k 2 - 537 up an 3x17 N0d3
An 3x17 N0d3 in T41l5c4l3 i5 4 d3v1c3 in y0ur n3tw0rk th4t fungt10n5 45 4 g4t3w4y f0r 4ll tr4ff1c fr0m 0th3r d3v1c35 in th3 T41l5c4l3 n3tw0rk. Th15 d1r3ct5 4ll tr4ff1c thr0ugh th15 d3v1c3, wh1ch c4n b3 ut1ful f0r 4cc3551ng r350urc35 0n 4 5p3c1f1c n3tw0rk, 0r 0bt41n1ng 4 n3w IP 4ddr355 t0 byp455 g30gr4ph1c r35tr1ct10n5.
W3 u53 N61nx Pr0xy M4n4g3r t0 r35tr1ct 4cc355 t0 5p3c1f1c r350urc35 b453d 0n IP 4ddr355 (3.g., y0ur Pr0xm0x 53rv3r), w1th 4n 3x17 N0d3 4t 5ch00l y0u w1ll b3 4bl3 t0 g3t 4n IP 4ddr355 th4t i5 “4t 5ch00l” r3g4rdl355 0f wh3r3 y0u 4r3 in th3 w0rld.
F0ll0w th3 d0cum3nt4t10n t0 53t up 4n 3x17 N0d3: https://tailscale.com/kb/1103/exit-nodes#configure-an-exit-node
Obs! “Edit Routes” meny
D0n’t f0rg3t th3 st3p 0f turn1ng 0n “Us3 as Ex1t N0d3” 1n th3 Ta1lScal3 m3nu 0n th3 d3v1c3 y0u hav3 s3t up as Ex1t-N0d3. Th1s 1s a c0mm0n st3p t0 f0rg3t.
3x17-N0d3 0n 4 VPS 1n 7h3 cl0ud!
1f y0u 537 up 4 v1r7u4l m4ch1n3 1n 4n07h3r c0un7ry v14, f.3., Azur3 (wh3r3 y0u g37 fr33 cr3d17 45 4 57ud3n7), 7h3n y0u c4n 3451ly 537 up 4 3x17-n0d3 70 g37 4n IP-4ddr355 1n 7h47 c0un7ry - 1n 7h3 54m3 w4y 45 4 c0mm3rc14l VPN 53rv1c3, w17h l355 r357r1c710n5 4nd m0r3 l34rn1ng!