SSL-VPN uses OpenVPN to establish secure connections between internet clients and a Virtual Private Cloud (VPC), with certificate-based authentication and encryption.
Alibaba Cloud VPN Gateway complies with relevant Chinese policies and regulations and supports only non-cross-border connections. For more information, see What are non-cross-border and cross-border connections?.
Prerequisites
Before reading, familiarize yourself with VPN Gateway.
SSL-VPN components
|
Component |
Description |
|
VPN gateway instance |
After you purchase a VPN gateway instance and enable SSL-VPN, Alibaba Cloud deploys the required VPN resources. |
|
SSL server |
An SSL server on the VPN gateway instance defines which networks and resources clients can access. |
|
SSL client certificate |
An SSL client certificate, generated from the SSL server, is downloaded and installed on the client for authentication and encryption. |
|
VPN software |
VPN software installed on the client establishes an SSL-VPN connection with VPN Gateway. |
|
Client |
An internet-connected device with VPN software and the SSL client certificate installed. The client connects to VPN Gateway over the internet through an SSL-VPN connection. |
Supported clients
SSL-VPN supports clients running Windows, Linux, macOS, or Android.
iOS clients can connect to VPN Gateway by using IPsec. For more information, see IPsec server.
