{"action":"opened","issue":{"url":"https://api.github.com/repos/RamonYeung/RamonYeung.github.io/issues/2","repository_url":"https://api.github.com/repos/RamonYeung/RamonYeung.github.io","labels_url":"https://api.github.com/repos/RamonYeung/RamonYeung.github.io/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/RamonYeung/RamonYeung.github.io/issues/2/comments","events_url":"https://api.github.com/repos/RamonYeung/RamonYeung.github.io/issues/2/events","html_url":"https://github.com/RamonYeung/RamonYeung.github.io/issues/2","id":131834880,"number":2,"title":"Note 1","user":{"login":"RamonYeung","id":9263603,"avatar_url":"https://avatars.githubusercontent.com/u/9263603?v=3","gravatar_id":"","url":"https://api.github.com/users/RamonYeung","html_url":"https://github.com/RamonYeung","followers_url":"https://api.github.com/users/RamonYeung/followers","following_url":"https://api.github.com/users/RamonYeung/following{/other_user}","gists_url":"https://api.github.com/users/RamonYeung/gists{/gist_id}","starred_url":"https://api.github.com/users/RamonYeung/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/RamonYeung/subscriptions","organizations_url":"https://api.github.com/users/RamonYeung/orgs","repos_url":"https://api.github.com/users/RamonYeung/repos","events_url":"https://api.github.com/users/RamonYeung/events{/privacy}","received_events_url":"https://api.github.com/users/RamonYeung/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-02-06T08:20:34Z","updated_at":"2016-02-06T08:20:34Z","closed_at":null,"body":"Some noise here will record my progress I am making recently.\r\n\r\n# Ideas involved\r\n* **Openswan** is an IPsec implementation for Linux. It has support for most of the extensions (RFC + IETF drafts) related to IPsec, including IKEv2, X.509 Digital Certificates, NAT Traversal, and many others.\r\n* **IPSec** encrypts your IP packets to provide encryption and authentication, so no one can decrypt or forge data between your clients and your server. \r\n* **L2TP** provides a tunnel to send data. It does not provide encryption and authentication though, that is why we need to use it together with IPSec.\r\n* **Xelerance/xl2tpd** Corporation currently maintains a version of the Layer 2 Tunneling Protocol (L2TP) daemon. These patches are needed to run on modern distributions to support **L2TP** over **IPsec**, when used in conjunction with **Openswan**.\r\n* **Nginx** (pronounced \"engine x\") is a web server with a strong focus on high concurrency, performance and low memory usage. It can also act as a reverse proxy server for HTTP, HTTPS, SMTP, POP3, and IMAP protocols, as well as a load balancer and an HTTP cache.\r\n* **LEMP** is a variation of the ubiquitous LAMP stack used for developing and deploying web applications. Traditionally, LAMP consists of Linux, Apache, MySQL, and PHP. Due to its modular nature, the components can easily be swapped out. With LEMP, Apache is replaced with the lightweight yet powerful **Nginx**."}}