<div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Apr 3, 2014 at 9:03 PM, netmantej <span dir="ltr"><<a href="mailto:netmantej@gmail.com" target="_blank">netmantej@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<br>
In the first ten years of my career, almost all of the issues I had on the wire (network) where traced back to a Microsoft product malfunctioning or working as designed.<br>
<br>
In the last fifteen years of my career, most of the issues I have on the wire or on the system trace back to a Java process malfunctioning or working as designed.<br>
<br>
<br>
-- Tim<div class=""><br>
<br>
On 4/3/14, 1:15 AM, Edward Capriolo wrote:<br>
</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">
Many people actually offer vpn in java.<br>
Juniper offers an ssl vpn that works for windows, mac, linux..<br>
<br>
<a href="http://kb.juniper.net/InfoCenter/index?page=content&id=KB28704" target="_blank">http://kb.juniper.net/<u></u>InfoCenter/index?page=content&<u></u>id=KB28704</a><br>
<br>
That is not a site to site vpn, but you get the drift.<br>
<br>
On Wednesday, April 2, 2014, netmantej <<a href="mailto:netmantej@gmail.com" target="_blank">netmantej@gmail.com</a><br></div><div class="">
<mailto:<a href="mailto:netmantej@gmail.com" target="_blank">netmantej@gmail.com</a>>> wrote:<br>
> A VPN solution written in Java?<br>
><br>
> You're sick. Sick, sick, sick.<br>
><br>
><br>
> -- Tim<br>
><br>
> On 4/2/14, 10:44 PM, Mark Saad wrote:<br>
>><br>
>> On Apr 2, 2014, at 9:50 PM, Edward Capriolo <<a href="mailto:edlinuxguru@gmail.com" target="_blank">edlinuxguru@gmail.com</a><br>
<mailto:<a href="mailto:edlinuxguru@gmail.com" target="_blank">edlinuxguru@gmail.com</a>><br></div><div class="">
>> <mailto:<a href="mailto:edlinuxguru@gmail.com" target="_blank">edlinuxguru@gmail.com</a> <mailto:<a href="mailto:edlinuxguru@gmail.com" target="_blank">edlinuxguru@gmail.com</a>><u></u>>> wrote:<br>
>><br>
>>> You could easily argue that a aite to site ipsec solution is industy<br>
>>> standard and has wide support across operating sytems and "routing<br>
>>> appliances" aka really expensive embedded computers ned cicso.<br>
>>><br>
>><br>
>> Wow I was totally expecting a " I use Cassandra to map out the best<br>
>> route and use this awesome tool that is written in java to ...."<br>
>><br>
>>> On Wednesday, April 2, 2014, Pete Wright <<a href="mailto:pete@nomadlogic.org" target="_blank">pete@nomadlogic.org</a><br>
<mailto:<a href="mailto:pete@nomadlogic.org" target="_blank">pete@nomadlogic.org</a>><br></div><div class="">
>>> <mailto:<a href="mailto:pete@nomadlogic.org" target="_blank">pete@nomadlogic.org</a> <mailto:<a href="mailto:pete@nomadlogic.org" target="_blank">pete@nomadlogic.org</a>>>> wrote:<br>
>>> ><br>
>>> ><br>
>>> > On 04/02/14 14:36, Marc Spitzer wrote:<br>
>>> >> Hi all,<br>
>>> >><br>
>>> >> I have been tasked with setting up a site to site vpn solution<br>
at work.<br>
>>> >> I was thinking about doing a openvpn on centos, we are a centos<br>
shop.<br>
>>> >> I would like to put in some freebsd boxes but I need a compelling<br>
>>> reason.<br>
>>> >><br>
>>> >> The last time I set this up I used cisco pix and that was a few<br>
>>> years ago.<br>
>>> >><br>
>>> ><br>
>>> > Did a very similar setup using OpenBSD. For me the compelling<br>
reasons<br>
>>> > where the great documentation, and relative simplicity of OpenBSD's<br>
>>> > IPSEC and OpenIked configuration file syntax especially when<br>
compared to<br>
>>> > openswan and openVPN even.<br>
>>> ><br>
>>> > -pete<br>
>>> ><br>
>>> ><br>
>>> > --<br>
>>> > Pete Wright<br>
>>> > <a href="mailto:pete@nomadlogic.org" target="_blank">pete@nomadlogic.org</a> <mailto:<a href="mailto:pete@nomadlogic.org" target="_blank">pete@nomadlogic.org</a>><br></div>
<mailto:<a href="mailto:pete@nomadlogic.org" target="_blank">pete@nomadlogic.org</a> <mailto:<a href="mailto:pete@nomadlogic.org" target="_blank">pete@nomadlogic.org</a>>><div class=""><br>
>>> > twitter => @nomadlogicLA<br>
>>> ><br>
>>> > ______________________________<u></u>_________________<br>
>>> > talk mailing list<br>
>>> > <a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a> <mailto:<a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a>><br></div>
<mailto:<a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a> <mailto:<a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a>><u></u>><div class=""><br>
>>> > <a href="http://lists.nycbug.org/mailman/listinfo/talk" target="_blank">http://lists.nycbug.org/<u></u>mailman/listinfo/talk</a><br>
>>> ><br>
>>><br>
>>> --<br>
>>> Sorry this was sent from mobile. Will do less grammar and spell check<br>
>>> than usual.<br>
>>> ______________________________<u></u>_________________<br>
>>> talk mailing list<br>
>>> <a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a><br></div>
<mailto:<a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a>> <mailto:<a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a><div class=""><br>
<mailto:<a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a>><u></u>><br>
>>> <a href="http://lists.nycbug.org/mailman/listinfo/talk" target="_blank">http://lists.nycbug.org/<u></u>mailman/listinfo/talk</a><br>
>><br>
>> Mark saad | mark.saad@yMail.com <mailto:<a href="mailto:mark.saad@yMail.com" target="_blank">mark.saad@yMail.com</a><br>
<mailto:<a href="mailto:mark.saad@yMail.com" target="_blank">mark.saad@yMail.com</a>>><br>
>><br>
>><br>
>> ______________________________<u></u>_________________<br>
>> talk mailing list<br></div>
>> <a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a> <mailto:<a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a>><div class=""><br>
>> <a href="http://lists.nycbug.org/mailman/listinfo/talk" target="_blank">http://lists.nycbug.org/<u></u>mailman/listinfo/talk</a><br>
>><br>
> ______________________________<u></u>_________________<br>
> talk mailing list<br></div><div class="">
> <a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a> <mailto:<a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a>><br>
> <a href="http://lists.nycbug.org/mailman/listinfo/talk" target="_blank">http://lists.nycbug.org/<u></u>mailman/listinfo/talk</a><br>
><br>
<br>
--<br>
Sorry this was sent from mobile. Will do less grammar and spell check<br>
than usual.<br>
</div></blockquote><div class="">
______________________________<u></u>_________________<br>
talk mailing list<br>
<a href="mailto:talk@lists.nycbug.org" target="_blank">talk@lists.nycbug.org</a><br>
</div><a href="http://lists.nycbug.org/mailman/listinfo/talk" target="_blank">http://lists.nycbug.org/<u></u>mailman/listinfo/talk</a><br>
</blockquote></div><br></div><div class="gmail_extra"><br><br></div><div class="gmail_extra">Uh...<br><br>I'll tell you my experiences with host-host IPSec on Centos have been bad. I used a setup with ipsec vifs connected to a bridge device, all using the cursed ifcfg-ethX config files. For some reason the association would just go sour every couple of days and I'd have to cycle the virtual interfaces. Magically it all came back up. And then just as magically it would all go down again.. in another couple days. This was on Centos5.5 I believe. Possible counterpoint should it come down to "my friend says that he..." But hopefully your case at work won't get into such nebulous territory as this thread has.<br>
<br>-- <br>-jesse
</div></div>