
© Infrant Technologies
14
Deploy Rsync over a VPN
While transferring data across networks is a business necessity, so also is ensuring the
information doesn’t fall into the wrong hands. For example, a malicious user can sniff data in
transit and steal confidential information, or he can perform a man-in-the-middle attack and
modify critical information during transit. Although Rsync doesn’t provide any native facility to
encrypt data, it can be used effectively over a VPN connection.
In brief, a VPN allows you to create a secure tunnel (between two endpoints) over a public
network, such as the Internet. There are three common types of VPNs, listed here from least to
most secure:
9 Point-to-Point Tunneling Protocol (PPTP)
9 Layer 2 Tunneling Protocol (L2TP)
9 IP Security (IPSec).
Each type of VPN offers its own authentication and encryption algorithms, and a complete
discussion of each is beyond the scope of this guide. Our discussion focuses primarily on
creating the necessary gateway and network policies to support a VPN. And finally, because the
configuration details can vary significantly between router manufacturers, we’ll provide only a
general outline of the procedures. Let’s start by examining the scenario shown in Figure K.
Figure K: Using a VPN, you can ensure that your Rsync backup jobs are secure.
Comentarios a estos manuales