Pertino - Is Anyone Successfully Using Any Version Above 510 with DNS/AD Connect?
-
@wrx7m said:
@scottalanmiller I was asking for suggestions on traditional VPN several posts up but everyone kept telling me to use ZT LOL. For a "traditional" VPN, do you have suggestions? I like the connection/client running as a service feature of pertino and ZT that enables to run prior to user login.
Yes, but we always mean "use it as intended." Given that you don't want to use what we were recommending (it's assumed when we say ZT that we mean "on every device") then why not a traditional VPN?
Normal VPNs do run that way, that's totally standard. Not every one, but it's been standard for decades. Probably with the first VPN ever. OpenVPN, for example, does that.
-
I know the standards of different VPN tech, like IP-sec, SSL, etc.
-
Maybe we should start from the beginning.
What do you want these mobile users to access and connect to?
-
@wrx7m said:
I know this isn't traditional but it still piqued my interest. Has anyone heard of Pritunl?
Isn't it? Looks like hosted OpenVPN to me.
-
@Breffni-Potter I want the user to be able to connect to anything on my LAN that I want to give them access to. File server, shoretel, printers et al. I want for me to be able to get to anything I want, period.
-
@scottalanmiller Is hosted considered traditional? I didn't know.
-
@wrx7m said:
@Breffni-Potter Right now I have Windows Server 2008 R2 with a God-forsaken PPTP connection. I am open to an appliance- virtual or physical.
Even the Windows world PPTP was the "legacy" way with Windows 2000.
-
@scottalanmiller I completely understand that. I have been trying to get rid of it for awhile. It was here when I got here.
Edit: hence the term "God-forsaken"
-
@wrx7m said:
@scottalanmiller Is hosted considered traditional? I didn't know.
Hosted isn't related to traditional. You don't host a Windows server and call it "something different." Hosted just means someone else running it for you so that you don't have to run it yourself. OpenVPN is OpenVPN, outsourcing the management isn't weird.
-
@scottalanmiller I gotcha. I meant in terms of the topology being, I have an appliance or server onsite that acts as a gateway for the connection of remote clients to access the LAN.
-
@wrx7m said:
@scottalanmiller I gotcha. I meant in terms of the topology being, I have an appliance or server onsite that acts as a gateway for the connection of remote clients to access the LAN.
Same topology as we used OpenVPN when we had it. When we moved from OpenVPN to Pertino our architecture didn't change, just the effort involved.
-
@scottalanmiller So what are you using now?
-
@wrx7m said:
@scottalanmiller So what are you using now?
Nothing, we dropped the LAN model and have no need for a unified IP addressing scheme any longer.
-
@scottalanmiller said:
@wrx7m said:
@scottalanmiller So what are you using now?
Nothing, we dropped the LAN model and have no need for a unified IP addressing scheme any longer.
So if you did have a need for a unified IP addressing scheme, would you be using ZeroTier or something else?
-
@wrx7m said:
@scottalanmiller said:
@wrx7m said:
@scottalanmiller So what are you using now?
Nothing, we dropped the LAN model and have no need for a unified IP addressing scheme any longer.
So if you did have a need for a unified IP addressing scheme, would you be using ZeroTier or something else?
We are using ZT for the lab and in the testing thus far, it has been good. But it is early. But Pertino was good for us while we used it and ZT looks like the next wave of that vision.
-
@scottalanmiller We hope to be the last wave. Please let us know about any issues you find and consider visiting https://www.zerotier.com/community/ and starting a thread about specific use cases you are investigating.
-
@adam.ierymenko said:
@scottalanmiller We hope to be the last wave. Please let us know about any issues you find and consider visiting https://www.zerotier.com/community/ and starting a thread about specific use cases you are investigating.
Ours isn't really that complicated. The lab is pretty basic, it's really about unifying an IP scheme and providing access to a large resource set for remote users.
-
@scottalanmiller We are also working on our enterprise offerings. See https://www.zerotier.com/product-ss.shtml -- we haven't made a big announcement quite yet but we are working with a few customers in the IoT and device space and this is also applicable to large enterprise SDN. We will offer live real-time monitoring of network quality of service and proactive investigation of problems as a service, and one of our engineers has a machine learning background so we are planning to leverage advanced quantitative analytics and deep learning against circuit test data eventually. We're also looking forward to pitting deep learning against harder scenarios in NAT traversal in the near-mid future.
Pricing on that page is still being refined. We might add something more fine grained in the future. Existing model is actually geared more toward IoT device vendors.
