西维蜀黍

【VPN】Dynamic Split Tunneling

Split Tunneling

Split tunneling is a computer networking concept which allows a user to access dissimilar security domains like a public network (e.g., the Internet) and a local LAN or WAN at the same time, using the same or different network connections. This connection state is usually facilitated through the simultaneous use of a Local Area Network (LAN) Network Interface Card (NIC), radio NIC, Wireless Local Area Network (WLAN) NIC, and VPN client software application without the benefit of access control.

For example, suppose a user utilizes a remote access VPN software client connecting to a corporate network using a hotel wireless network. The user with split tunneling enabled is able to connect to file servers, database servers, mail servers and other servers on the corporate network through the VPN connection. When the user connects to Internet resources (Web sites, FTP sites, etc.), the connection request goes directly out the gateway provided by the hotel network. However, not every VPN allows split tunneling. Some VPNs with split tunneling include Private Internet Access (PIA), ExpressVPN, and Surfshark.

Context

In mycompany.com we have a lot of internal networks that are available only via VPN.

These are on the same domain mycompany.com, but in different networks:

10.165.248.252 - git.mycompany.com
10.236.142.18 - jira.mycompany.com
152.68.167.141 - test.mycompany.com

Is there any possibility to provide the top level domain (mycompany.com) instead of single links in domain for vpn tunneling? e.g. instead of providing single subdomains

  • git.mycompany.com
  • jira.mycompany.com
  • test.mycompany.com
  ...


【Network】暴力穷举 Subdomains

Websites

  ...


【Network】软路由

硬件选择

Intel NUC 11 NUC11PAHi7

CPU

  • Intel Core i7-1165G7:
  • 4 cores, 8 threads
  • Base clock: 2.8 GHz
  • Max Turbo Frequency: 4.7 GHz
  • 12MB Intel Smart Cache
  • 10nm SuperFin technology

Memory:

  • Dual-channel DDR4-3200 SO-DIMM slots
  • ‎16 GB DDR4
  • Supports up to 64GB of RAM (2 x 32GB)

Storage:

  • M.2 22x80 key M slot** for NVMe or SATA SSD
    • Cur: ‎512 GB SSD
  • 2.5-inch SATA3 drive bay for additional SSD or HDD (up to 9.5mm thickness)

Networking:

  • Intel Wi-Fi 6 AX201 (802.11ax)

  • Bluetooth 5.2

  • 2.5 Gigabit Ethernet (RJ-45 port)

CPU选择

不考虑

  • J1900
  • 3865U
  • 4205U 2C/2T
    • 2G内存,16G SSD -> 1090
  • 5205U 2C/2T

考虑的

大CPU

  • i3-8130U(双核四线程,8代CPU,2.2GHz)
    • 8G内存,64G SSD,千兆 1750
    • 16G内存,126G SSD硬盘 -> 2050
  • i5-8250U(四核八线程)

小CPU

  ...


【VPN】OpenConnect

Install

# macOS
$ brew install openconnect
# Ubuntu
$ sudo apt-get install openconnect
  ...


【macOS】Keychain 破解

Keychain

A keychain is a locked, encrypted container used in Keychain Access to store account names and passwords for apps, servers, AirPort base stations, and websites. You can also use keychains to store confidential information such as credit card numbers or personal identification numbers (PINs) for bank accounts.

The keychain files are stored in ~/Library/Keychains, /Library/Keychains/ and /Network/Library/Keychains/. These files are viewed and edited through an application called Keychain Access, found in the Utilities folder in the Applications folder.

  • Your keychain (for your personal account) is stored in the Library: /Users/<accountname>/Library/Keychains/login.keychain
  ...