Can the softether server specify a policy that allows users to access the specified URL and use vpn traffic. Specify by domain name, not by IP. Because sometimes it changes. Just like specifying a static route.
For example, I need to let users access www.abc.com and use vpn traffic. Visit other websites without using vpn。
How to configure policies
-
shakibamoshiri
- Posts: 288
- Joined: Wed Dec 28, 2022 9:10 pm
Re: How to configure policies
The feature you are mentioning is not supported by SE server.
You need custom routing (aka static routing) for a/some endpoints. but it is NOT as easy as it seems.
For example you want a website like "example.com" be served via VPN server/traffic but other websites be served by domestic network or be blocked.
We are fooled to think that "example.com" equals an IP address e.g (1.2.3.4) and thus if we route this IP to the VPN gateway everything will work out.
It is not quite right since a website is associated with many resources which any of them is served by other servers. So the bigger the website is the more IP (servers) are associated with that single website. Which means if you want to route traffic for a website all the IPs associated for that website should be routed to the VPN gateway. e.g
- the website main servers (web servers)
- the website CDN for (images. videos, svg, etc)
- the website assets (CSS, JS, etc files)
- etc
I finding all these IPs is not easy.
In short what you are looking for is done be a router (could be an OS e.g Linux or Windows server) not by a VPN server software
You need custom routing (aka static routing) for a/some endpoints. but it is NOT as easy as it seems.
For example you want a website like "example.com" be served via VPN server/traffic but other websites be served by domestic network or be blocked.
We are fooled to think that "example.com" equals an IP address e.g (1.2.3.4) and thus if we route this IP to the VPN gateway everything will work out.
It is not quite right since a website is associated with many resources which any of them is served by other servers. So the bigger the website is the more IP (servers) are associated with that single website. Which means if you want to route traffic for a website all the IPs associated for that website should be routed to the VPN gateway. e.g
- the website main servers (web servers)
- the website CDN for (images. videos, svg, etc)
- the website assets (CSS, JS, etc files)
- etc
I finding all these IPs is not easy.
In short what you are looking for is done be a router (could be an OS e.g Linux or Windows server) not by a VPN server software