Need to wrap ONE application inside VPN connetion (General questions)
by David Alfonso, Saturday, January 02, 2010, 08:14 (5438 days ago)
We need to establish a VPN connection for just one application. We don't want any other apps on the client machine to have access to this VPN connection. Is this possible with your product?
Re: Need to wrap ONE application inside VPN connet
by wodSupport, Saturday, January 02, 2010, 12:06 (5438 days ago) @ David Alfonso
David,
do you need to do this for only one connection, or you need full range of services to be redirected (including ICMP packets)?
I don't think you can do full network redirect on per application basis. For example, if data arrives from remote side, how can you tell it's FOR your application? If rmote side initiated ping , is it for your application or not?
So, I think you should redirect exact TCP or UDP ports - and we can help there.
Hope I helped.
Kreso
Re: Need to wrap ONE application inside VPN connet
by David Alfonso, Saturday, January 02, 2010, 16:51 (5438 days ago) @ wodSupport
It would only use a single port (i.e. 22, 80, 139, 445). I am trying to accomplish what apps like http://barracudaserver.com/products/GetMyLAN/
The allow you to basically proxify one or more apps.
- David
David,
do you need to do this for only one connection, or you need full range of services to be redirected (including ICMP packets)?
I don't think you can do full network redirect on per application basis. For example, if data arrives from remote side, how can you tell it's FOR your application? If rmote side initiated ping , is it for your application or not?
So, I think you should redirect exact TCP or UDP ports - and we can help there.
Hope I helped.
Kreso
Re: Need to wrap ONE application inside VPN connet
by wodDamir, Saturday, January 02, 2010, 17:32 (5438 days ago) @ David Alfonso
David,
But you can already do so. Just instead of using network adapter, use port forwarding. The idea is to setup forwarding on some random local port, and forward it to remote peer on some specific port, let's say 22. Once the channel is started, you simply connect to that local port. You can also check our samples on how to accomplish that.
Please note that other applications would still be able to use the channel, but since a random port is assigned, they're unaware of it.
I don't see a way to completely *prevent* applications from using the sockets.
Is that what you had in mind?
Regards,
Damba
