l2tp protocol proxy: L2TP protocol proxy server construction and setup

What the heck is an L2TP protocol proxy?

Folks may have heard of the term L2TP, which is, to put it bluntlyLayer 2 Tunneling ProtocolThe HTTP Proxy is a special kind of proxy that is used to build tunnels through holes in the Internet. With our common HTTP proxy is different, it can wrap the entire network traffic are transmitted, suitable for the need to stabilize the scene of a long connection. For example, to do data collection of old iron, with this protocol with a proxy IP, not easy to be recognized by the target site.

There's a key point here that's easy to confuse: L2TP doesn't come with encryption on its own, so it has to be used in conjunction with IPsec to be secure. But don't panic, in practice, it's just a matter of installing two more software packages. Nowadays, there are some proxy service providers on the market that will package the whole program directly, like the one we are going to talk about.ipipgoOff-the-shelf solutions are available.

Teach you how to build L2TP proxy servers

First the whole overseas server, it is recommended to choose Ubuntu 20.04 system. Follow the steps below (note that after the number is a comment do not copy):

 Install the necessary packages
sudo apt-get install openswan xl2tpd ppp -y

 Modify the ipsec configuration
echo "conn L2TP-PSK
    authby=secret
    pfs=no
    auto=add
    keyingtries=3
    ikelifetime=8h
    keylife=1h
    type=transport
    left=%any
    leftprotoport=17/1701
    right=%any
    rightprotoport=17/1701" >> /etc/ipsec.conf

 Set the pre-shared key
echo "Server IP address %any : PSK 'your key'" > /etc/ipsec.secrets

配完记得开防火代理端口：1701 TCP/UDPrespond in singing500/4500 UDPIf it's too much trouble, just use ipipgo's cloud server service. If it's too much of a hassle, just use ipipgo's cloud server business, they have the environment pre-installed.

How do I connect the client with the least amount of trouble?

Take Windows 10 for example and follow this process:

1. 进网络设置新建连接
2. 类型选L2TP/IPsec
3. Fill in the server address (use the entry node provided by ipipgo)
4. The pre-shared key is filled with the previously set
5. Account password with the authentication information given by the service provider

Remember to test the IP to see if it's working after connecting. Recommended to use ipipgo client tool, they do automatic routing diversion, will not affect the local network use.

First Aid Guidelines for Common Rollover Scenes

Q: I'm connected but can't access the Internet?
A: Check the server iptables rules to make sure there is NAT forwarding done. Or directly change ipipgo's ready-made program, their technical support can help troubleshoot.

Q: Slow as a snail?
A: Maybe the protocol overhead is too large, try to reduce the MTU value to about 1400. If you use ipipgo's cross-border line, they come with protocol optimization, the speed can be 30% faster.

Q: What should I do if I keep dropping out?
A: In the ppp configuration add alcp-echo-interval 30respond in singinglcp-echo-failure 4, keeping heartbeat detection. Or just use their dedicated static IP package, stability is guaranteed.

Why do you recommend ipipgo's solution?

You have to worry about maintenance and IP blocking when you build your own servers. ipipgo.L2TP Proxy SolutionThere are three brushes:

theirStatic Home PackageEspecially suitable for the need for fixed export IP business, 35 dollars an IP with a whole month, more cost-effective than self-built servers. New users can also get a 3-day trial, the official website to find customer service to test the account on the line.

Lastly, I'd like to say: don't just look at the price of the proxy service, but also look at the quality of the IP and the after-sales service. Some small workshops sell cheap packages, the actual use of all broadcast IP, can not pass the anti-climbing detection. ipipgo IP are local operators directly cooperate with the support of the verification of the IP belongs to the place, with a solid.