ocserv FOR LINUX

ocserv (also known as OpenConnect server) is an open-source command-line OpenConnect VPN (Virtual Private Network) solution powered by SSL (Secure Sockets Layer). It is designed to work on any GNU/Linux server that implements the AnyConnect SSL VPN protocol. The software is secure, configurable, portable, fast, small, and depends on standard protocols, such as Datagram TLS and TLS 1.2.

Key Features

• Full compatibility with the OpenConnect VPN client


• Experimental support for other AnyConnect SSL VPN clients


• Ability to allow VPN users to authenticate using a certificate, a password authentication method, or any combination of these two methods


• Unprivileged worker process assigned to authenticated users, obtaining an IP and networking (tun) device from a configurable pool of addresses


• Management interface to monitor logged-in users


• Support for TCP wrappers and both IPv4 and IPv6 network protocols


• Support for route pushing and storing the server key in TPM, on a smart card, or on a HSM


• No support for compression


• Dual UDP/TCP VPN channel

Security

The program utilizes the IETF security protocol to keep the VPN channel protected at all times. It uses privilege separation, sandboxing, resilience, and accounting to ensure the security of the OpenConnect SSL VPN channel.

Technical Specifications

• Written in C programming language


• Runs on a console/terminal environment without a graphical user interface


• Available as a universal source archive for 32-bit and 64-bit GNU/Linux operating systems


• Supports installation from default software repositories

Publisher Information

Publisher: Nikos Mavrogiannopoulos and David Wood

Publisher Link: Click Here