æéã®VPNãããã³ã«ãçºè¦ãããã¨ã«é¢å¿ãããããå¸å ´ã§æãå®å ¨ãªVPNãããã³ã«ã®1ã¤ã«å å ¥ãããå ´åã¯ããã¾ãã¾ãªç¨®é¡ã®æ å ±ãåéããå¿ è¦ãããã¾ããå®ç§ãªçãã¯ãªãã¨ãããã¨ãè¦ãã¦ãããã¨ãéè¦ã§ããã¾ããåãããã³ã«ã«ãã£ã¦ç°ãªããã¨ããããã¾ãã
æ§ã ãªãã¼ãºã¨è¦ä»¶ãã«ãã¼ããããã«ããã«ãããã¾ãã¾ãªVPNãããã³ã«ã使ããã¦ãã¾ããã ããã¾ãããªãã®åªå äºé ãä½ã§ããããçè§£ããããªãã«æé©ãªãªãã·ã§ã³ã鏿ãããã¨ãæåã§ãã
ãèªèº«ã«ä»¥ä¸ã®è³ªåããã¦ã¿ã¦ãã ããï¼
- ãªã³ã©ã¤ã³ã§VPNæ¥ç¶Â ã使ç¨ãããã¨ã«ãããªãã¯ã©ããªä¾¡å¤ãè¦ãã ãã¾ããï¼
- ããªãã¯å®å ¨ãªãã©ã¤ãã·ã¼ãæãã§ãã¾ããï¼
- ããªãã¯æãéãã¹ãã¼ããæãã§ãã¾ããï¼
- ãããã¯ãããªãã®ãã¼ãºã«åã£ããããã³ã«ã鏿ããããã®çãã§ããããªãã®ç¹å¥ãªãã¼ãºã«æé©ãªVPNãããã³ã«ã¯ä½ã§ããï¼
ããªãã®åªå é ä½ãèªè¦ããã©ã®æ©è½ãå¿ è¦ãªã®ããè¦æ¥µãã¦ãã ããã
ããªãã«ã¨ã£ã¦æãéè¦ãªæ©è½ããªã¹ãã¢ããããã®ãæãçã«ããªã£ã¦ãã¾ããçµå±ã®ã¨ãããæé«ã®é度ã§å®å ¨ãªæå·åãå¾ããã¨ã¯æå¾ ã§ãã¾ãããã©ã®VPNãããã³ã«ã§ãã®æ©è½ãæ¬ ãã¦ããã®ãããããã¯ã©ã®æ©è½ãå¼·ã¿ã¨ãã¦ããã®ãæ¤è¨¼ãã¾ãããã
以ä¸ã®VPNãããã³ã«ã®æ¯è¼ã§ã¯ããããã®æ©è½ããã§ãã¯ãã¦ããã«å¿ãã¦æçµçã«ã©ã®ãããã³ã«ã«æ±ºå®ããã®ãã夿ãããã¨ãã§ãã¾ããããããã®åºæºãæºãããæå·åãä¿¡é ¼æ§ãé度ã«é¢ããæå¾ ãä¸åãVPNãããã³ã«ãè¦ã¦ã¿ã¾ãããã
VPNãããã³ã«ã®æ¯è¼ – PPTTã¨ãªã¼ãã³VPNã¨PPTPã¨L2TP / IPSecãSSTPã¨IKEV2
#PPTP:ï¼ãã¤ã³ãtoãã¤ã³ããã³ããªã³ã°ãããã³ã«
ããã¯ãå¸å ´ã§æãå¤ããããã³ã«ã®1ã¤ã§ããããããå¹´é½¢ã®ããã§ãããæé«ã ã¨ããããã§ã¯ããã¾ãããããã¯ãããªããå©ç¨ãã¦ããVPNã«ã¤ãã¦è¦ãããæ¨æºçãªãããã³ã«ã§ãã
ãã®ãããã³ã«ã®ããã¤ãã®è³å¦ä¸¡è«ï¼
æåã§ã»ããã¢ããããã®ã¯é常ã«ç°¡åã§ãã VPNæ¥ç¶ã使ç¨ããå ´åãèªåã§æ¥ç¶ãããããå¿é
ããå¿
è¦ã¯ããã¾ãããè¨ç®ãªã¼ãã¼ããããå°ãªãã¦ãã¿ã¾ãã
ãããã¯å¤§ããªã¡ãªããã§ãããPPTPã«ã¤ãã¦è©±ãéã«ã¯å¤§ããªæ¬ ç¹ããããã¨ãèªèããå¿
è¦ãããã¾ããããã¯ãPPTPãå®å
¨ã§ããã¨ã¯ã¿ãªãããªãã¨ããäºå®ã§ããããã¦ããã¯NSAã«ãã£ã¦ç¤ºããã¦ãããããå½¼ããè§£èªã§ããéããããªãã®æ
å ±ã«ç°¡åã«ã¢ã¯ã»ã¹ã§ãã¾ãã
#L2TP / IPSEC
ããã¯è峿·±ããããã³ã«ã®è¨å®ã§ãããªãã§ãããï¼ VPNãããã³ã«L2TPèªä½ãå®å ¨ã§ã¯ããã¾ããããå®éã®ã¨ããæå·åã¯ã¾ã£ããæä¾ããã¾ããã
ãã ããIPSecæå·åã¯ãIPSecæå·åã使ç¨ããã¦ã¼ã¶ã¼ã«ã»ãã¥ãªãã£ã¨ãã©ã¤ãã·ã¼ãæä¾ãã¾ããã»ã¨ãã©ã®VPNããã³ãªãã¬ã¼ãã£ã³ã°ã·ã¹ãã ã«ã¯ãL2TP / IPSecãçµã¿è¾¼ã¾ãã¦ãã¾ãããã®ãããã³ã«ã®è³å¦ä¸¡è«ã¯æ¬¡ã®ã¨ããã§ãã
é©åº¦ã«å®å
¨ã¨èãããã
æåã§ã»ããã¢ããããã®ã¯ç°¡åã§ãï¼VPNæ¥ç¶ã使ç¨ãã¦ããå ´åã¯æåã§è¨å®ããå¿
è¦ã¯ããã¾ããï¼
OpenVPNãããéã
ãããããã®ãããã³ã«ã¯NSAã«ãã£ã¦å¦¥åããããããããªãããããã¯è¨¼æããã¦ããªããã¨ã«çæããããããã®ç¶æ³ã«ããã¦ããNSAããããå®å
¨ã«å¦¥åããªããã°ãããã¯å¼±ä½åãã¦ããã¨å¤ãã®äººã¯ä¿¡ãã¦ãããããã«ããã®ãããã³ã«ã使ç¨ãã¦ããå ´åãé©åãªãã¡ã¤ã¢ã¦ã©ã¼ã«ãééãããã¨ããã¨è¦å´ããå¯è½æ§ãããã¾ãã
ï¼OpenVPN
ããã¯å¸å ´ã§æ°ãããããã³ã«ã®1ã¤ã§ãï¼OpenVPNãããã¯SSLv3 / TLSv1ãããã³ã«ã¨å ±ã«OpenSSLã©ã¤ãã©ãªãå©ç¨ãã¾ãã OpenVPNãããã³ã«ã¯ãæ¯è¼çå®å ¨ã¨èãããã128ãããã®Blowfishæå·ãå©ç¨ãã¦ãã¾ããããããªãããæ¢ç¥ã®åé¡ãåå¨ãããããã¼ãã£ãã·ã¥ã®ä½æè ã§ããã人ã ãä»£æ¿ææ®µã使ç¨ãããã¨ã示åãã¦ãã¾ãã
ã»ã¨ãã©ã®VPNãããã¤ãã¯ãBlowfishã§ã¯ãªãAES-256ã§OpenVPNã使ç¨ãã¦ãã¾ãã AES-256ã¯ç±³å½æ¿åºã«ãã£ã¦ä½¿ç¨ããã¦ããæå·åã·ã¹ãã ã§ãããOpenVPNã«æ²¿ã£ã¦ä½æ¥ããå ´åãã»ãã¥ãªãã£ã¬ãã«ã¯é常ã«é«ãã§ãã
OpenVPNã®é度ã¯ã¦ã¼ã¶ã¼ã«ãã£ã¦ç°ãªãã¾ããããã¯ãªãã§ããï¼é度ã¯ã使ç¨ããã¦ããæå·åã®ã¬ãã«ã«å¤§ããä¾åãã¾ãããã®ãããã³ã«ã®ããã¤ãã®è³å¦ä¸¡è«ï¼
ããã¯ãã»ã¨ãã©ãã¹ã¦ã«è¨å®ã§ãã1ã¤ã®ãããã³ã«ã§ã
é常ã«å®å
¨ã§ãç°¡åã«ãã¡ã¤ã¢ã¦ã©ã¼ã«ããã¤ãã¹ã§ãã¾ã
ããå¤ãã®å¶å¾¡ãå¯è½ã«ãããã¾ãã¾ãªæå·åã¢ã«ã´ãªãºã ã使ç¨ãã
ããããããã¯å¸å ´ã«ããä»ã®ãããã³ã«ãããã»ããã¢ãããé£ããã使ç¨ããããã«ãµã¼ããã¼ãã£ã®ã½ããã¦ã§ã¢ã使ç¨ããªããã°ãªãããåºç¯å²ã®åé¡ã«å¯¾ãã¦ããã¤ã¹ãéããã¨ãã§ãã¾ãã
ãã®ãµã¼ããã¼ãã£ã®ã½ããã¦ã§ã¢ã使ç¨ããã¨ãæ°ããåé¡ãè å¨ã«å¯¾ãã¦ããã¤ã¹ãéããã¨ãã§ãã¾ãããã®ãµã¼ããã¼ãã£ã®ã½ããã¦ã§ã¢ãå®å ¨ã«å®å ¨ã«ä½¿ç¨ãããã¨ã¯ä½ãè¨ãã¾ããããã®ã½ããã¦ã§ã¢ããã¦ã³ãã¼ãããããã¤ã¹ã«ãã«ã¦ã§ã¢ãã¦ã¤ã«ã¹ãæ·»ä»ãããã¨ã¯çãããã¨ã§ã¯ããã¾ããã
ããããOpenVPNãå¸å ´ã§æé«ã®VPNæ¥ç¶ã使ã£ã¦ä½¿ç¨ããå ´åã¯ã両æ¹ã®è¨å®ã«ã¤ãã¦å¿é ããå¿ è¦ã¯ããã¾ãã