1 point by cybersecurityuser 7 months ago flag hide 14 comments
johnsmith123 7 months ago next
This is a great question! I've been looking to build a secure VPN from scratch as well. I'm excited to see what kind of answers we get here. I've been researching using OpenVPN as a starting point.
hackingexpert15 7 months ago next
@johnsmith123 OpenVPN is a solid choice. I'd recommend checking out StrongSwan as well, it's another great open-source VPN solution. It has a lot of features and it's easy to customize for your needs. One thing to keep in mind is to make sure you set up proper authentication and encryption methods.
codergirl12 7 months ago prev next
I'd recommend starting out by setting up your VPN server on a cloud provider, it's much easier and more flexible than setting it up on-premise. I've had a lot of success using AWS and DigitalOcean.
johnsmith123 7 months ago next
@codergirl12 That's a good point. I've been debating whether to use a cloud provider or set it up on-premise. Do you have any tips on how to secure the connection between the client and the server on a cloud provider?
codergirl12 7 months ago next
@johnsmith12 Sure! I'd recommend using a secure protocol like SSL/TLS and also using a VPN client that supports it. This will ensure that the connection is encrypted and authenticated. Additionally, you should also use a strong authentication method like a certificate or a shared secret. And also don't forget to keep your VPN server and client updated with the latest security patches.
securityexpert1 7 months ago prev next
One thing that's important to keep in mind when building a VPN is to make sure that the traffic is not only encrypted but also separated from the rest of the network. This can be achieved by using a technology like VLANs or by setting up dedicated network interfaces for the VPN. This will ensure that even if an attacker manages to compromise the VPN, they will not be able to access the rest of the network. Additionally, you should also configure access control lists to limit which IP addresses and protocols are allowed to connect to the VPN.
johnsmith123 7 months ago next
@securityexpert1 That's some great advice. I hadn't considered setting up VLANs or dedicated network interfaces for the VPN. I'll make sure to include that in my design. Also, configuring access control lists is a great idea, I'll make sure to do that as well.
networkingknowitall 7 months ago prev next
When it comes to setting up a VPN, it's important to choose the right type of VPN. There are many different types, such as PPTP, L2TP/IPSec, and OpenVPN. Each type has its own set of pros and cons. PPTP is easy to set up but not very secure. L2TP/IPSec is more secure but more complex to set up. OpenVPN is the most secure but also the most complex to set up. I'd recommend going with OpenVPN, as it's the most secure and it's widely supported.
johnsmith123 7 months ago next
@networkingknowitall That's helpful, I hadn't realized there were so many different types of VPNs. I'll definitely go with OpenVPN like you suggested. Do you have any tips on how to properly set it up and configure it?
networkingknowitall 7 months ago next
@johnsmith123 Sure thing! I'd recommend following the official OpenVPN documentation for setting up the server. It's well-written and easy to follow. In terms of configuring the server, I'd recommend using a strong encryption algorithm like AES-256 and the OpenVPN protocol. Additionally, you should also set up a client-to-server authentication method, such as a pre-shared secret, a certificate, or a user/password pair. It's also important to keep the OpenVPN server updated with the latest security patches and to enable the built-in logging capabilities to monitor for any suspicious activity.
vpnfan1992 7 months ago prev next
I'd recommend checking out Algo, it's a great open-source tool for creating your own VPN. It uses Wireguard as the VPN protocol and it's very easy to use. It's also very secure and it has a lot of features, such as automatic certificate generation, easy-to-use configuration files, and compatibility with various platforms including Windows, Mac, and Linux.
johnsmith123 7 months ago next
@vpnfan1992 That's interesting, I haven't heard of Algo before. I'll definitely check it out and see if it fits my use-case. It's great to have different options and I appreciate the recommendation!
privacyguru 7 months ago prev next
One thing to keep in mind when building a VPN is to make sure that you don't keep any logs of the connection. Many VPN providers keep logs of the users' connections and the activity, which can be used to track the users' behavior. By making sure that you don't keep any logs, you can ensure that the users' privacy is protected.
johnsmith123 7 months ago next
@privacyguru That's a great point, I hadn't thought about that. I'll make sure to configure the VPN to not keep any logs and to also delete any logs that are generated upon connection.