Content deleted Content added
m HTTP to HTTPS for SourceForge |
|||
| (38 intermediate revisions by 32 users not shown) | |||
Line 1:
{{short description|Form of virtual private network tunnel}}
{{distinguish|Simple Symmetric Transport Protocol}}
{{Infobox technology standard
'''Secure Socket Tunneling Protocol''' (SSTP) is a form of [[Virtual private network|VPN]] tunnel that provides a mechanism to transport [[Point-to-Point Protocol|PPP]] or {{citation needed span|text=[[Layer 2 Tunneling Protocol|L2TP]]|date=May 2016}} traffic through an [[Transport Layer Security|SSL]]/[[Transport Layer Security|TLS]] channel. SSL/TLS provides transport-level security with key-negotiation, [[encryption]] and traffic integrity checking. The use of SSL/TLS over [[Transmission Control Protocol|TCP]] port 443 allows SSTP to pass through virtually all [[Firewall (computing)|firewalls]] and [[proxy server]]s except for authenticated web proxies.<ref>{{cite web▼
| title = SSTP
| long_name = Secure Socket Tunneling Protocol
| image =
| image_size =
| alt =
| caption =
| abbreviation =
| native_name = <!-- Name in local language. If more than one, separate using {{plain list}} -->
| native_name_lang = <!-- ISO 639-1 code e.g. "fr" for French. If more than one, use {{lang}} inside native_name items instead -->
| status =
| year_started = 2007
| first_published = {{Start date|2007|02|22|df=y}}
| version =
| version_date =
| preview =
| preview_date =
| organization = [[Microsoft]]
| committee =
| series =
| editors =
| authors =
| base_standards = MS-SSTP
| related_standards =
| predecessor =
| successor =
| ___domain =
| license =
| copyright =
| website = <!-- {{URL|https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-sstp/}} -->
}}
In [[computer networking]], '''Secure Socket Tunneling Protocol''' ('''SSTP''') is a form of [[virtual private network]] (VPN) tunnel that provides a mechanism to transport [[Point-to-Point Protocol]] (PPP) traffic through an [[Transport Layer Security|SSL/TLS]] channel.
==Protocol==
▲
| url=http://blogs.technet.com/b/rrasblog/archive/2007/01/17/sstp-faq-part-2-client-specific.aspx
| title=SSTP FAQ - Part 2: Client Specific
Line 9 ⟶ 44:
| accessdate=2015-10-17}}</ref>
SSTP servers must be [[authentication|authenticated]] during the SSL/TLS phase. SSTP clients can optionally be authenticated during the SSL/TLS phase
SSTP is available for [[Linux]], [[BSD]], and [[Windows]].<ref>{{cite web
| url=
| title=SSTP-Client
| date=2011-09-17
| accessdate=2015-10-17}}</ref>
▲For Windows, SSTP is available on [[Windows Vista SP1]] and later, in [[RouterOS]], and in [[IIJ SEIL|SEIL]] since its firmware version 3.50. It is fully integrated with the RRAS architecture in these operating systems, allowing its use with [[Winlogon]] or [[smart card]] authentication, remote access policies and the Windows VPN client.<ref>{{cite web
| url=http://www.biztechmagazine.com/article/2008/01/sstp-makes-secure-remote-access-easier
| title=SSTP Makes Secure Remote Access Easier
Line 35 ⟶ 66:
| accessdate=2015-10-17}}</ref>
SSTP
SSTP suffers from the same performance limitations as any other IP-over-TCP tunnel. In general, performance will be acceptable only as long as there is sufficient excess bandwidth on the un-tunneled network link to guarantee that the tunneled TCP timers do not expire. If this becomes untrue, performance falls off dramatically
| url=http://sites.inka.de/bigred/devel/tcp-tcp.html
| title=Why TCP Over TCP Is A Bad Idea
Line 49 ⟶ 74:
| last=Titz
| date=2001-04-23
| accessdate=2015-10-17}}</ref><ref>{{cite
|
|
|author1=Honda, Osamu |
| volume=6011
| page=60110H
|author2=Ohsaki, Hiroyuki |author3=Imase, Makoto |author4=Ishizuka, Mika |author5=Murayama, Junichi | s2cid=8945952
| editor2-first=Sergey I
| editor2-last=Balandin
| editor1-first=Mohammed
| editor1-last=Atiquzzaman
| date=October 2005
| doi=10.1117/12.630496
SSTP supports user authentication only; it does not support device authentication or computer authentication.
== Packet structure ==
Line 66 ⟶ 101:
{| class="wikitable" style="text-align :center"
|+SSTP
|-
!
|-
! 0
|
|-
! 32+
| colspan="32"| Data
|}
* Version (8 bits) – communicates and negotiates the version of SSTP that is used.
* Reserved (7 bits) – reserved for future use.
* C (1 bit) –
* Length (16 bits) – packet length field, composed of two values: a Reserved portion and a Length portion.
:* Reserved (4 bits) – reserved for future use.
:* Length (12 bits) – contains the length of the entire SSTP packet, including the SSTP header.
* Data (variable) – when
=== Control message ===
Line 88 ⟶ 125:
{| class="wikitable" style="text-align:center"
|+SSTP
|-
!
|-
! 0
|
|-
!32+
|colspan="32"| Attributes
|}
* Message
* Attributes
* Attributes (variable) – contains a list of attributes associated with the SSTP control message. The number of attributes is specified by the Attributes
==See also==
Line 109 ⟶ 148:
* [[PPTP]]
* [[SoftEther VPN]], an open-source VPN server program which supports SSTP-VPN protocol.
* [[WireGuard]]
==References==
Line 114 ⟶ 154:
==External links==
*[https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-sstp/c50ed240-56f3-4309-8e0c-1644898f0ea8 <nowiki>[MS-SSTP]: Secure Socket Tunneling Protocol (SSTP)</nowiki>] by [[Microsoft Open Specification Promise]]
*[http://blogs.technet.com/rrasblog/archive/tags/SSTP/default.aspx RRAS Technet Blog]
*[http://www.techworld.com/networking/news/index.cfm?newsID=7814&pagtype=all Microsoft develops new tunneling protocol]
*[
*[http://www.hsc.fr/ressources/outils/sstoper/index.html.en HSC's SSTP Client for Linux]
*[
{{VPN}}
| |||