VPNs Illustrated: Tunnels, VPNs, and IPsec (Paperback)

Jon C. Snader

  • 出版商: Addison Wesley
  • 出版日期: 2005-10-01
  • 售價: $2,350
  • 貴賓價: 9.5$2,233
  • 語言: 英文
  • 頁數: 480
  • 裝訂: Paperback
  • ISBN: 032124544X
  • ISBN-13: 9780321245441
  • 立即出貨(限量) (庫存=2)

買這商品的人也買了...

商品描述

Description

Virtual private networks (VPNs) based on the Internet instead of the traditional leased lines offer organizations of all sizes the promise of a low-cost, secure electronic network. However, using the Internet to carry sensitive information can present serious privacy and security problems. By explaining how VPNs actually work, networking expert Jon Snader shows software engineers and network administrators how to use tunneling, authentication, and encryption to create safe, effective VPNs for any environment.

Using an example-driven approach, VPNs Illustrated explores how tunnels and VPNs function by observing their behavior "on the wire." By learning to read and interpret various network traces, such as those produced by tcpdump, readers will be able to better understand and troubleshoot VPN and network behavior.

Specific topics covered include:

  • Block and stream symmetric ciphers, such as AES and RC4; and asymmetric ciphers, such as RSA and EIGamal
  • Message authentication codes, including HMACs
  • Tunneling technologies based on gtunnel
  • SSL protocol for building network-to-network VPNs
  • SSH protocols as drop-in replacements for telnet, ftp, and the BSD r-commands
  • Lightweight VPNs, including VTun, CIPE, tinc, and OpenVPN
  • IPsec, including its Authentication Header (AH) protocol, Encapsulating Security Payload (ESP), and IKE (the key management protocol)

Packed with details, the text can be used as a handbook describing the functions of the protocols and the message formats that they use. Source code is available for download, and an appendix covers publicly available software that can be used to build tunnels and analyze traffic flow.

VPNs Illustrated gives you the knowledge of tunneling and VPN technology you need to understand existing VPN implementations and successfully create your own.

Table of Contents

Preface.

I. BACKGROUND.

1. Introduction.

    Purpose

    Readers

    Typographical Conventions

    Source Code and Third-Party Programs

    Testbed

    Road Map

    Summary

2. TCP/IP Overview.

    Introduction

    Layering

    Encapsulation

    Addressing

    IP

    UDP

    TCP

    ICMP

    NAT and Private IP Addresses

    PPP

    IPv6

    Routing

    Summary

    Exercises

3. Cryptography Overview.

    Introduction

    Symmetric Ciphers

    Asymmetric Ciphers

    Cryptographic Hash Functions, MACs, and HMACs

    Digital Signatures

    Certificates

    Summary

    Exercises

4. Tunnels.

    Introduction

    IP-in-IP Tunnels

    PPPoE

    GRE

    PPTP

    L2TP

    MPLS

    gtunnel

    Summary

    Exercises

II. TUNNELS AND VPNS.

5. Virtual Private Networks.

    Introduction

    PPTP

    L2TP

    Other VPNs

    Summary

    Exercises

6. Secure Sockets Layer.

    Introduction

    Cipher Suites

    The SSL Protocol

    SSL on the Wire

    OpenSSL

    The stunnel Program

    SSL Security

    Summary

    Exercises

7. SSH.

    Introduction

    The SSHv1 Protocol

    The SSHv2 Protocol

    Building VPNs with SSH

    Summary

    Exercises

8. Lightweight VPNs.

    Introduction

    Vtun

    CIPE

    Tinc

    OpenVPN

    Summary

    Exercises

III. IPSEC.

9. IPsec.

    Introduction

    An Overview of IPsec

    Road Map for Part 3

    Summary

    Exercises

10. IPsec Architecture.

    Introduction

    Protocols

    IPsec Modes

    Security Associations

    Combining Security Associations

    Policies

    IPsec Processing

    Summary

    Exercises

11. AH.

    Introduction

    The AH Header

    Sequence Numbers

    AH Processing

    Transport Mode

    Tunnel Mode

    AH with IPv6

    Summary

    Exercises

12. ESP.

    Introduction

    The ESP Header

    ESP Processing

    Transport Mode

    Tunnel Mode

    ESP with IPv6

    Summary

    Exercises

13. IKE.

    Introduction

    ISAKMP

    IKE

    An Example Negotiation

    Summary

    Exercises

14. IPsec Futures.

    Introduction

    IPsec Architecture

    AH

    ESP

    IKE

    NAT Traversal

    Summary

    Exercises

Appendix A: Source Code.

    Introduction

    Cryptographic Routines

    Library Code

Appendix B: Miscellaneous Software.

    Netcat

    tcpdump and Other Packet Sniffers

    ssldump

    PPP

Bibliography.

Index.

商品描述(中文翻譯)

描述

基於互聯網而不是傳統租用線路的虛擬私人網絡(VPN)為各種規模的組織提供了低成本、安全的電子網絡的承諾。然而,使用互聯網傳輸敏感信息可能會帶來嚴重的隱私和安全問題。通過解釋VPN的實際工作原理,網絡專家Jon Snader向軟件工程師和網絡管理員展示如何使用隧道、身份驗證和加密在任何環境中創建安全、有效的VPN。

《VPNs Illustrated》以實例驅動的方式探討了隧道和VPN的功能,通過觀察它們在網絡上的行為來理解它們的運作方式。通過學習閱讀和解釋各種網絡跟踪,如tcpdump生成的跟踪,讀者將能夠更好地理解和排除故障VPN和網絡行為。

具體涵蓋的主題包括:

- 基於對稱密碼的塊和流加密算法,如AES和RC4;以及基於非對稱密碼的算法,如RSA和EIGamal
- 包括HMAC在內的消息驗證碼
- 基於gtunnel的隧道技術
- 用於構建網絡對網絡VPN的SSL協議
- 作為telnet、ftp和BSD r-commands的替代品的SSH協議
- 輕量級VPN,包括VTun、CIPE、tinc和OpenVPN
- IPsec,包括其身份驗證標頭(AH)協議、封裝安全有效載荷(ESP)和IKE(密鑰管理協議)

這本書充滿了細節,可以作為手冊,描述協議的功能和它們使用的消息格式。源代碼可供下載,附錄介紹了可用於構建隧道和分析流量的公開軟件。

《VPNs Illustrated》將為您提供了解隧道和VPN技術的知識,以理解現有的VPN實現並成功創建自己的VPN。