Understanding Tunneling: Hiding Packets In Plain Sight

"A tunnel is a mechanism used to ship a foreign protocol across a network that normally wouldn't support it. Tunneling protocols allow you to use, for example, IP to send another protocol in the "data" portion of the IP datagram. Most tunneling protocols operate at layer 4, which means they are implemented as a protocol that replaces something like TCP or UDP.

"VPN tunnels allow remote clients to tunnel into our network. This supports the previous notion of tunnels being used for "unsupported protocols," even though that may not be apparent. If we VPN into work to gain access to printers or file sharing, it's probably because ports 139 and 445 (the Windows mating ports) are blocked from the outside. They are, in effect, unsupported TCP ports across our border routers. But if we allowed IPSEC or PPTP across the border, to known VPN servers, then everything "just works.""

Complete Story

Related Stories:

• Will OpenSolaris 2008.11 Attract Linux Users?(Dec 10, 2008)
• How the Linux Kernel Manages Virtual Memory(Nov 22, 2008)
• iBGP: Synchronizing the Internet(Nov 20, 2008)
• Border Gateway Protocol, The Routing Protocol of the Internet(Nov 12, 2008)
• What Exactly is the Internet? A Tour of Internet Routing and Peering(Nov 08, 2008)
• OSPF Routing Protocol: Popular and Robust(Oct 22, 2008)