D3773 3r 3n m45k1n0v3rs477 73k57 50m k4n 1nn3h0ld3 f31l!
VPN, 0r V1rtu4l Pr1v4t3 N3tw0rk, 1z 4 z0lut10n th4t l3tz uz cr34t3 4 z3cur3 (3ncrуpt3d) c0nn3ct10n t0 4n0th3r n3tw0rk 4nd d3v1c3(z) 0v3r th3 1nt3rn3t.
F1r57, wh47 15 4 pr1v473 n37w0rk? (n07 VPN)
37 pr1v473 n37w0rk 15 4 n37w0rk 7h47 15 150l473d fr0m 07h3r n37w0rk5. 7h15 c4n b3 4 c0rp0r473 n37w0rk, 4 h0m3 n37w0rk, 0r 4n07h3r 7yp3 0f n37w0rk 7h47 15 n07 0p3n 70 3v3ry0n3. 4n 0p3n n37w0rk, 5uch 45 47 4n 41rp0r7, 15 4l50 73chn1c4lly 4 pr1v473 n37w0rk, bu7 7h3y 4r3 u5u4lly c0nf1gur3d 70 150l473 d3v1c35 fr0m 34ch 07h3r 70 1ncr3453 53cur17y.
Th0ught sc3n4ri0
Imag1ne y0u h4ve 4 pr1nt3r @ hom3 th@t you w4nt t0 us3 to p9int out a d0cum3nt. This pri8ter is connec7ed to your home network and theref0re has a priv5te IP address that can only be accessed by devices connected directly into the local netw0rk of yours own locaLity; You cAn uSe Your MACHinE AT HOME TO PRINT WITHOUT ANY PROBLEMS BUT YOUR NEIGHBOUR IS ON A DIFFERENT NETWORK AND CANNOT REACH THE PRINTER EASILY ENOUGH FROM THERE ALONE .
You also cannot communicate with printer from e.g school or other networks because it’s not exposed on internet (which shouldn’t happen anyway for security reasons).
Note: No rules without exceptions…
Some devices however offer solutions using VPN-related technology allowing printing documents anywhere in world as long having access online - this might create some risks so watch carefully what connect up onto system especially IoT things surveillance cameras etceteras …
H4v3 y0u n071c3d 7h47 3v3ry 71m3 y0u c0nn3c7 70 4 n3w n37w0rk, y0u g37 4 qu35710n 4b0u7 wh37h3r y0u 4r3 c0nn3c71ng 70 4 “pr1v473” 0r “publ1c” n37w0rk?
7h15 15 70 3n5ur3 7h47 W1nd0w5 (0r 07h3r 0p3r471ng 5y573m5) u53 7h15 1nf0rm4710n 70 d373rm1n3 wh1ch f1r3w4ll rul35 5h0uld b3 u53d 70 pr073c7 y0ur d3v1c3. 4 pr1v473 n37w0rk 15 u5u4lly un53cur3d (4ll c0nn3c73d d3v1c35 4u70m471c4lly 7ru57 34ch 07h3r), 4nd 15 7h3r3f0r vuln3r4bl3 70 07h3r d3v1c35 0n 7h3 54m3 n37w0rk. In 3xch4ng3, y0u c4n 3451ly 5h4r3 pr1n73r5, f1l35, 4nd 07h3r r350urc35 wh3n m4ch1n35 4r3 0n 7h3 54m3 n37w0rk.
C0mm3rc14l 4ct0r5
7h3r3 4r3 m4ny c0mm3rc14l 4ct0r5 7h47 0ff3r VPN-53rv1c35, wh1ch 4d v3r7153 w17h 7h47 7h3y c4n pr073c7 y0ur pr1v4cy 0n 7h3 1n73rn37 4nd l37 y0u 5urf 4n0nym0u5ly. 7h15 15 n07 n3c3554r1ly 7h3 wh0l3 7ru7h, 4nd 17 15 1mp0r74n7 70 b3 4w4r3 0f wh47 4 VPN 4c7u4lly d035.
1n pr4c71c3, 0n3 m0v35 7h3 n37w0rk c0nn3c710n 70 4n07h3r l0c4710n (0f73n 4n07h3r c0un7ry), 45 w3 u53 VPN-53rv3r5 45 4 m1ddl3m4n b37w33n 0ur cl13n7 4nd 7h3 1n73rn37.
Comm3rci4l VPN ! = s3curity
M@ny @ctors m@m0t1v@s th3ms3lv@s 4s 4 servicc pr0viding incR3as3d security, but fOr most usErs this iS nOt the cAse. WhEn wE visit websitEs using H7TP5 (evEn on pUblic Wi-Fi), the connEction is aLreAdy encrypTed, so A VPn wiLL not neceSSarily provIdE any addItional securIty. It can‘8 also noT “hide” your activITies from yoUr internet providEr complEtely.
In certaiN countrIEs or placEs it may bE benefICial howEvER; hoWeVER, imPortant to be awarE that you are shifting yOur trust frOm your intEernet proVider tO the vPn provider.
0ff3n71c3 n37w0rk5
W3 0f73n h34r 7h47 w3 mu57 n07 c0nn3c7 70 un53cur3d publ1c n37w0rk5, l1k3 47 c4f35, 41rpor75, h073l5, 37c. 7h15 15 n07 n3c3554r1ly pr0bl3m471c 45 l0ng 45 w3 u53 HTTPS (3ncryp73d) 70 v1517 w3b51735.
Wh47 c4n b3 pr0bl3m471c 15 1f 50m30n33 5375 up 4 “f4l53” n37w0rk w17h, f.3., 4 m4l1c10u5 C4p71v3 P0r74l (4 w3b5173 7h47 u5u4lly r3qu1r35 l0g1n 0r 4cc3p74nc3 0f 73rm5 b3f0r3 w3 g37 4cc355 70 7h3 1n73rn37).
H4v3 y0u ch3ck3d 1f y0u h4v3 “4u70m471c c0nn3c710n” 70 0p3n n37w0rk5 0n y0ur mob1l3 0r l4p70p? 7h15 c4n m4k3 y0ur d3v1c3 c0nn3c7 70 4 m4l1c10u5 n37w0rk w17h0u7 y0u b31ng 4w4r3 0f 17.
Wh4t c4n w3 us3 4 VPN 4t?
4 VPN c4n b3 us3d t0 c0nn3ct t0 d3vic3s 4cr0ss n3tw0rks, 4s if th3y w3r3 0n th3 s4m3 (priv4t3) n3tw0rk, in 4 m0r3 s3cur3 w4y th4n 3xp0sing th3 d3vic3s dir3ctly t0 th3 int3rn3t (0p3n p0rts in th3 fir3w4ll). N0t3 th4t w3 must still h4v3 4 VPN s3rv3r th4t w3 c4n c0nn3ct t0, w3 c4n 3ith3r s3t it up 0urs3lv3s (r3quir3s 0p3ning in fir3w4ll), 0r us3 4 pr0vid3r th4t 0ff3rs 4 r3l4y (int3rm3di4ry) f0r us. P0pul4r 0pti0ns 4r3 0p3nVpn, Wir3Gu4rd, 4nd IPs3c.
Eksempel
Y0u h4v3 4 g4m1ng PC th4t y0u w1sh t0 c0nn3ct w1th y0ur l4pt0p wh3n y0u 4r3 4t sch00l v14 R3m0t3 D3skt0p s0ftw4r3 (RDP). Y0u c4n th3n s3t up 4 VPN s0lut10n th4t l3ts y0u c0nn3ct t0 y0ur h0m3 n3tw0rk, 4nd th3n us3 RDP t0 c0nn3ct t0 y0ur g4m1ng PC 4s 1f y0u w3r3 4t h0m3.
1n 0ur c453, w3 w1ll u53 1t 70 637 4cc355 70 7h3 r350urc35 h3r3 47 7h3 5ch00l fr0m 07h3r pl4c35 1n 7h3 w0rld, 4nd w3 w1ll l473r l00k 47 cl0ud c0mpu71ng wh3r3 w3 w15h 70 c0nn3c7 0ur53lv35 70 vir7u4l 53rv3r5 1n 7h3 cl0ud 1n 4 54f3 m4nn3r. 7yp1c4lly, w3 0p3n 4 p0r7 70 0ur 53rv3r 70 537 7h15 up, b3f0r3 w3 l0ck d0wn 7h3 53rv3r 4f73rw4rd5 (u5u4lly 4 5173-70-5173 VPN).
7h3 0nly pr4c71c4l d1ff3r3nc3 15 7h47 w3 637 4 d1ff3r3n7 IP-4ddr355 0v3r 0ur VPN n37w0rk (e.g., 100.64.x.x/10 15 0f73n u53d f0r VPN), bu7 7h3 func710n4l17y 15 45 1f w3 w3r3 0n 7h3 54m3 n37w0rk. 7h15 m34n5 7h47 w3 c4n u53, f.e., RDP, SSH, FTP (F1l3 7r4n5f3r Pr070c0l), 37c. w17h0u7 h4v1ng 70 0p3n up 0ur 53rv1c35 1n 7h3 f1r3w4ll.
745k14v3 1 - 1n574114710n 0f 74115c413 VPN
H31d11y f0r u5, 1n574114710n 0f VPN 15 345y, 5p3c1411y 1f 0n3 u535 4 53rv1c3 11k3 74115c413. 7h15 15 4 c0mm3rc141 53rv1c3 7h47 0ff3r5 4 51mp13 w4y 70 537 up 4 W1r3Gu4rd VPN, wh1ch 61v35 u5 m0r3 7h4n 3n0ugh func710n41117y f0r 0ur n33d5 0n 175 fr33 713r (100 un175).
F0110w 7h3 1n574114710n pr0c355 45 1n 7h3 d0cum3n74710n: https://tailscale.com/download
Merk
Y0u n33d VPN 0n 4ll 7h3 d3v1c3s y0u w15h 70 c0nn3c7 70 7h3 n37w0rk w17h. 7h15 1nclud35 b07h 53rv3r5, PC5, m0b1l35, 37c.
T45k 2 - 537 up an 3x17 N0d3
An 3x17 N0d3 in T41l5c4l3 i5 4 d3v1c3 in y0ur n3tw0rk th4t fungt10n5 45 4 g4t3w4y f0r 4ll tr4ff1c fr0m 0th3r d3v1c35 in th3 T41l5c4l3 n3tw0rk. Th15 d1r3ct5 4ll tr4ff1c thr0ugh th15 d3v1c3, wh1ch c4n b3 ut1ful f0r 4cc3551ng r350urc35 0n 4 5p3c1f1c n3tw0rk, 0r 0bt41n1ng 4 n3w IP 4ddr355 t0 byp455 g30gr4ph1c r35tr1ct10n5.
W3 u53 N61nx Pr0xy M4n4g3r t0 r35tr1ct 4cc355 t0 5p3c1f1c r350urc35 b453d 0n IP 4ddr355 (3.g., y0ur Pr0xm0x 53rv3r), w1th 4n 3x17 N0d3 4t 5ch00l y0u w1ll b3 4bl3 t0 g3t 4n IP 4ddr355 th4t i5 “4t 5ch00l” r3g4rdl355 0f wh3r3 y0u 4r3 in th3 w0rld.
F0ll0w th3 d0cum3nt4t10n t0 53t up 4n 3x17 N0d3: https://tailscale.com/kb/1103/exit-nodes#configure-an-exit-node
Obs! “Edit Routes” meny
D0n’t f0rg3t th3 st3p 0f turn1ng 0n “Us3 as Ex1t N0d3” 1n th3 Ta1lScal3 m3nu 0n th3 d3v1c3 y0u hav3 s3t up as Ex1t-N0d3. Th1s 1s a c0mm0n st3p t0 f0rg3t.
3x17-N0d3 0n 4 VPS 1n 7h3 cl0ud!
1f y0u 537 up 4 v1r7u4l m4ch1n3 1n 4n07h3r c0un7ry v14, f.3., Azur3 (wh3r3 y0u g37 fr33 cr3d17 45 4 57ud3n7), 7h3n y0u c4n 3451ly 537 up 4 3x17-n0d3 70 g37 4n IP-4ddr355 1n 7h47 c0un7ry - 1n 7h3 54m3 w4y 45 4 c0mm3rc14l VPN 53rv1c3, w17h l355 r357r1c710n5 4nd m0r3 l34rn1ng!