VPN
VPN creates a secure, encrypted tunnel over the internet.
01What is VPN?
code
[Your PC] ══════════════════════════ [Company Network]
Encrypted Tunnel (VPN)
Over the Internet
- Virtual: Software-based, not physical
- Private: Encrypted, secure
- Network: Network connection
02VPN Use Cases
1. Remote Access
code
Work from home → VPN → Company network
2. Site-to-Site Connection
code
Branch A → VPN Tunnel → Main Office
3. Privacy
code
You → VPN Server → Internet
↓
Your IP is hidden
4. Bypassing Geographic Restrictions
code
Turkey → US VPN → US Netflix
03VPN Protocols
| Protocol | Security | Speed | Usage |
|---|---|---|---|
| OpenVPN | High | Medium | Most common |
| WireGuard | High | Very High | Next generation |
| IPSec | High | Medium | Enterprise |
| L2TP/IPSec | Medium | Low | Legacy |
| PPTP | Low | High | Don't use! |
04How VPN Works?
1. Connection Setup
code
Client → Authentication → VPN Server
(user/password or certificate)
2. Tunnel Creation
code
[Original Packet] → Encryption → [VPN Packet]
Original:
[IP Header][TCP][Data]
↓
With VPN:
[New IP][VPN][Encrypted(IP+TCP+Data)]
3. Data Transmission
code
Encrypted data → Internet → VPN Server → Decryption → Destination
05Enterprise VPN Scenario
code
Internet
|
┌──────────────┼──────────────┐
| | |
[Home] [Branch] [Mobile]
| | |
└──────────────┼──────────────┘
|
[VPN Gateway]
|
[Company Network]
/ \
Server Files
06VPN Types
Remote Access VPN
- Single user connection
- Work from home
- SSL VPN common
Site-to-Site VPN
- Connection between two networks
- Between branches
- IPSec common
07Split Tunneling
Full Tunnel:
code
All traffic → VPN → Internet
(slow but secure)
Split Tunnel:
code
Company traffic → VPN
Internet traffic → Direct
(fast but risky)
08VPN Security
Provides:
- ✅ Encryption (data can't be read)
- ✅ Authentication
- ✅ IP hiding
- ✅ Man-in-the-middle protection
Doesn't Provide:
- ❌ Anonymity (VPN provider can see)
- ❌ Malware protection
- ❌ 100% privacy
09Summary
- VPN = Encrypted tunnel over internet
- For remote access and security
- OpenVPN and WireGuard recommended
- Split tunneling balances performance/security