[nzlug] VPN/Tunnel software

[Jim Cheetham]

On Mon, Oct 02, 2006 at 12:50:24PM +1300, Matt Brown wrote:
> Simon Lyall wrote:
> > 1. Debian/Ubuntu at both ends. Servers not desktops (ie not graphical)
> 
> I would highly recommend OpenVPN. It's easy to setup, secure and it
> really does "just work". It handles Dynamic IPs with no problems, and
> you can setup a huge range of different tunnel types.

OpenVPN highly recommended. Seriously; go for it.
> 
> I don't think it does traffic shaping.

No, but you can use your existing kernel shaping tools to manage the tun
interface directly, without OpenVPN being aware of you. It's the only
way to shape different traffic types anyway, before they get crypted.
Unfortunately that means you can't shape the tunnel itself in any way,
only the input/output of it.

-jim