Just to have your opinion on it: I've a PHP site on a server, connected to Freeswitch (mod_event_socket) on another server. Which method would you recommend to protect data trasmitted between two servers (they travel on internet)?
On Sat, 13 Aug 2011 15:41:46 +0200, Chrisbware <chrisbware@interfree.it> wrote:
Just to have your opinion on it: I've a PHP site on a server, connected to Freeswitch (mod_event_socket) on another server. Which method would you recommend to protect data trasmitted between two servers (they travel on internet)?
stunnel in mode 2 (cli + svr certificates + full authentication) -- In a great romance, each person basically plays a part that the other really likes. -- Elizabeth Ashley
It's a plaintext protocol so nothing you can do within FS to secure it. Firewall the ports to restrict external access and use a VPN if you need to encrypt the data. Steve on iPhone On 13 Aug 2011, at 14:41, Chrisbware <chrisbware@interfree.it> wrote:
Just to have your opinion on it: I've a PHP site on a server, connected to Freeswitch (mod_event_socket) on another server. Which method would you recommend to protect data trasmitted between two servers (they travel on internet)?
_______________________________________________ Join us at ClueCon 2011, Aug 9-11, Chicago http://www.cluecon.com 877-7-4ACLUE
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
OpenVPN, IPSec +L2TP and PPTP comes to mind here for VPN solutions On Sat, Aug 13, 2011 at 11:07 AM, Steven Ayre <steveayre@gmail.com> wrote:
It's a plaintext protocol so nothing you can do within FS to secure it. Firewall the ports to restrict external access and use a VPN if you need to encrypt the data.
Steve on iPhone
On 13 Aug 2011, at 14:41, Chrisbware <chrisbware@interfree.it> wrote:
Just to have your opinion on it: I've a PHP site on a server, connected to Freeswitch (mod_event_socket) on another server. Which method would you recommend to protect data trasmitted between two servers (they travel on internet)?
_______________________________________________ Join us at ClueCon 2011, Aug 9-11, Chicago http://www.cluecon.com 877-7-4ACLUE
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ Join us at ClueCon 2011, Aug 9-11, Chicago http://www.cluecon.com 877-7-4ACLUE
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
On 08/13/2011 08:49 PM, curriegrad2004 wrote:
OpenVPN, IPSec +L2TP and PPTP comes to mind here for VPN solutions
Afaik PPtP is not very secure (it's a Windows thing) and IPSec+L2TP is secure but quite a challenge to setup so I would suggest OpenVPN with client certificate authentication. Regards, Patrick
A simple ssh tunnel with port mapping should work.. -Avi On Mon, Aug 15, 2011 at 3:10 AM, Patrick Lists < freeswitch-list@puzzled.xs4all.nl> wrote:
On 08/13/2011 08:49 PM, curriegrad2004 wrote:
OpenVPN, IPSec +L2TP and PPTP comes to mind here for VPN solutions
Afaik PPtP is not very secure (it's a Windows thing) and IPSec+L2TP is secure but quite a challenge to setup so I would suggest OpenVPN with client certificate authentication.
Regards, Patrick
_______________________________________________ Join us at ClueCon 2011, Aug 9-11, Chicago http://www.cluecon.com 877-7-4ACLUE
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
On Mon, 15 Aug 2011 02:10:22 +0200, Patrick Lists <freeswitch-list@puzzled.xs4all.nl> wrote:
On 08/13/2011 08:49 PM, curriegrad2004 wrote:
OpenVPN, IPSec +L2TP and PPTP comes to mind here for VPN solutions
Afaik PPtP is not very secure (it's a Windows thing) and IPSec+L2TP is secure but quite a challenge to setup so I would suggest OpenVPN with client certificate authentication.
I don't see why people are talking about VPN: it is one more risk as both machines are widely opened to each other. Tunneling only the wanted service reduce this risk to almost nothing. -- BOFH excuse #86: Runt packets
participants (6)
-
Avi Marcus
-
Chrisbware
-
curriegrad2004
-
Jean-Yves F. Barbier
-
Patrick Lists
-
Steven Ayre