Multi-network single-inlet VPN system based on WireGuard and OpenVPN
A single-entry, multi-network technology, applied in the field of network communication, can solve the problems of users' remote access to the intranet, inability to access authority control, difficulty in ensuring the security of enterprise intranet data, and inability to adapt to the hybrid cloud network environment, etc. Effectiveness of managing issues, increasing trust, and reducing financial costs
Pending Publication Date: 2022-04-05
上海甄云信息科技有限公司
View PDF4 Cites 2 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0004] For this reason, the present invention provides a multi-network single-entry VPN system based on WireGuard and OpenVPN to solve the problem that the existing users cannot control the access rights when they remotely access the intranet, cannot adapt to the hybrid cloud network environment, and it is difficult to ensure that the enterprise intranet Data Security Issues
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment
[0037] refer to Figure 1-Figure 4 , the present embodiment discloses a multi-network single-entry VPN system based on WireGuard and OpenVPN, the system is:
[0038] Users use OpenVPN for single-entry access, and use Wireguard to create tunnels on the third layer of the network to connect to different networks. User traffic is transmitted to the VPN gateway through the tun0 network interface of OpenVPN through the SSL security tunnel, and data packets are filtered through nftables and forwarded to Wireguard. The network interface sends data to the destination network through the tunnel, and performs authentication and access control on enterprise-level users through the Lightweight Directory Access Protocol (LDAP) protocol.
[0039] The specific working process of the system is: configure the node of the WireGuard server, add the node configuration of the WireGuard client or relay server after the configuration is completed, configure the OpenVPN server and OpenVPN client, and...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a multi-network single-entrance VPN system based on a WireGuard and an OpenVPN, and the system is characterized in that a user carries out the single-entrance access through the OpenVPN, builds a tunnel at the third layer of a network through the WireGuard, gets through different networks, transmits the user flow to a VPN gateway through an SSL safety tunnel from a tun0 network interface of the OpenVPN, carries out the data packet filtering through nftables, and forwards the data packet to a network interface of the WireGuard. And sending data to a destination network through a tunnel, and carrying out authentication and access authority control on an enterprise-level user through a light directory access protocol (LDAP). According to the method, the problems that the access authority cannot be controlled, the hybrid cloud network environment cannot be adapted and the data security of the enterprise intranet is difficult to ensure due to the fact that the existing user remotely accesses the intranet are solved.
Description
technical field [0001] The invention relates to the technical field of network communication, in particular to a multi-network single-entry VPN system based on WireGuard and OpenVPN. Background technique [0002] In order to realize functions such as remote office of users, scalable intercommunication of hybrid cloud network, control of user access rights, and traffic monitoring, many enterprises have adopted different solutions. Most companies will use the existing SSL VPN-EasyConnect client, the role of this VPN client is to enable users to remotely access the intranet for work. By deploying the EasyConnect device at the front end of the core application server in the security domain of the enterprise, the core business system is released to the user terminal to protect the data. After the network configuration is completed, the EasyConnect device automatically delivers the remote application plug-in to the terminal, and the user accesses the core business system of the e...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More IPC IPC(8): H04L12/46H04L9/40
Inventor 刘隆剑蔡迎港欧志伟吴坚
Owner 上海甄云信息科技有限公司