RECENT POSTS
- Introduction to FreeBSD Security Best Practices
- Working with Package Management in FreeBSD
- Understanding FreeBSD Security Advisories and Updates
- Troubleshooting Common System Administration Issues in FreeBSD
- Tips for Hardening FreeBSD to achieve System Protection
- Setting Up DHCP Server in FreeBSD
- Secure User and Group Management in FreeBSD Systems
- Secure Remote Access with SSH in FreeBSD
- Optimizing System Performance in FreeBSD
- Network Packet Capture with tcpdump in FreeBSD
- All posts ...
Do you have GDPR compliance issues ?
Check out Legiscope a GDPR compliance software, that will save you weeks of work, automating your documentation, the training of your teams and all processes you need to keep your organisation compliant with privacy regulations
Ocserv
Jul 20, 2023
Server implementing the AnyConnect SSL VPN protocol
OpenConnect server ocserv is an SSL VPN server. Its purpose is to be a secure, small, fast and configurable VPN server. It implements the OpenConnect SSL VPN protocol, and has also currently experimental compatibility with clients using the AnyConnect SSL VPN protocol. The OpenConnect protocol provides a dual TCP/UDP VPN channel, and uses the standard IETF security protocols to secure it. Both IPv4 and IPv6 are supported.
Ocserv’s main features are security through privilege separation and sandboxing, accounting, and resilience due to a combined use of TCP and UDP. Authentication occurs in an isolated security module process, and each user is assigned an unprivileged worker process, and a networking tun device. That not only eases the control of the resources of each user or group of users, but also prevents data leak e.g., heartbleed-style attacks, and privilege escalation due to any bug on the VPN handling worker process. A management interface allows for viewing and querying logged-in users.
Checkout these related ports:
- Zyre - Framework for proximity-based peer-to-peer applications
- Zsync - File transfer program
- Zmap - Internet scanner
- Zillion - Distributed computing project
- Zerotier - Network virtualization everywhere
- Zebra-server - Z39.50/SR server software
- Yptransitd - Replacement for nss_ldap
- Yggdrasil - Experimental end-to-end encrypted self-arranging IPv6 network
- Yconalyzer - TCP Traffic Analyzer
- Yazproxy - Powerful general purpose Z39.50/SRW/SRU proxy
- Yaz - Z39.50/SR client and API library
- Yaz++ - C++ toolkit for development of Z39.50v3 clients and servers
- Yate - Yet Another Telephony Engine
- Yaph - Yet Another Proxy Hunter (proxy scanner)
- Yami4 - Messaging library for distributed systems