[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Web openvpn.net

Re: [Openvpn-users] OpenVPN on Bochs?

  • Subject: Re: [Openvpn-users] OpenVPN on Bochs?
  • From: "James Yonan" <jim@xxxxxxxxx>
  • Date: Fri, 13 Jun 2003 11:22:14 -0000

I have heard from people who claimed to have gotten OpenVPN running on Windows
by using something like Fish's TunTap32 + Fishpack + winpcap.  I got in touch
with Fish to see what his opinion was on this solution, and he warned me that
trying to throw a VPN TUN/TAP driver together by using winpcap and fudging
ARPs is a Bad Idea and a huge kludge.  It's something quick and dirty that was
implemented for the Hercules emulator just to get something running quickly. 
While winpcap is a nice looking project that has brought tcpdump to windows,
it isn't any replacement for a real windows miniport driver.  While I don't
have experience with the Bochs emulator, I expect that running OpenVPN in an
emulated context will be measurably inefficient.

I've been watching the Cipe project lately with interest.  While I believe
that the VPN component of Cipe is somewhat behind OpenVPN in terms of
flexibility and features, Cipe's win32 kernel driver (under the direction of
Damion Wilson) has been stabilizing very nicely and is really just a stone's
throw away from being a TAP driver.

I really believe at this point, that this is the path of least resistance
between OpenVPN and Windows.


"R. Alan Monroe" <amonroe@xxxxxxxxxxxxxxx> said:

> > Even better: The driver might already be there (kind of). From the Bochs
> > documentation:
> > "Emulates an NE2000 compatible network card. On Windows NT/2000, Linux,
> > FreeBSD, and NetBSD, Bochs will forward packets to and from the operating
> > system so that the guest OS can talk on the physical network.
> > Unfortunately, on some platforms the guest OS can talk to any machine on
> > the network BUT NOT the host machine. On Windows and on systems that allow
> > the TAP or TUN/TAP interface, there is no such limitation. Often the host
> > machine may be configured so the guest OS has access to the internet. On
> > MacOSX, it is not possible yet to forward packets between the guest and
> > the host."
> > So while it's not properly a TUN/TAP interface maybe the Bochs folks have
> > already solved the particular problem and/or have some code (LGPL'd!)
> > which can form the basis for a native TUN/TAP driver for Windows that
> > OpenVPN could talk to.
> As far as I know, they write to the nic using the third party winpcap
> library.
> Alan
> -------------------------------------------------------
> This SF.NET email is sponsored by: eBay
> Great deals on office technology -- on eBay now! Click here:
> http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/openvpn-users


Openvpn-users mailing list