iPhone - 发送特定 URL 的 VPN 流量
我正在构建一个基于 iPhone 的网络应用程序，供我们的高管查看销售数据。该应用程序通过 SSL 与典型的登录页面设置当天的 cookie。
由于信息很敏感，而且我们有 VPN，我希望作为双重预防措施，我可以通过我们的 VPN 发送与此应用程序的所有通信。
有没有办法可以通过 VPN 仅为特定 URL 路由流量？有人有关于 VPN 配置中“发送所有流量”的更多信息吗？
谢谢
I am building a iPhone web based app for our execs to view sales data. The app goes over SSL with a typical login page that sets a cookie for the day.
Since the info is sensitive and we have a VPN at work I was hoping as a double precaution I could send all communications with this app over our VPN.
Is there a way I can route traffic over the VPN only for a specific URL? Does anyone have any more info on the "Send All Traffic" in the VPN configuration
Thanks
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
正确完成 HTTPS 应该就足够了。为手机提供客户端证书（有一个工具）并确保服务器检查它们......并在服务器端使用吊销列表，以防手机被盗。
Properly done HTTPS should be sufficient. Provision the phone with a client certificate (there's a tool for that) and ensure the server checks them... and use a revocation list on the server side in case of stolen phones.
在 iPhone 中设置和管理 VPN 路由器和服务器并不容易。您应该为此进行一些 HTTPS 设置。此后，客户端将能够访问您的计算机。否则 iPhone VPN 将失去了运行服务器的目标。
Making settings and managing the VPN routers and servers in iPhone is not easy. You should to make some HTTPS settings for this. After this, the client will be able to access your computer. Otherwise iphone vpn will lose its goal to run the server.
该应用程序对 VPN 的控制很少。正确配置的 HTTPS 站点（特别是使用双向证书）将为您的应用程序提供所需的保护。
也就是说，我强烈建议企业用户在任何情况下都通过 VPN 发送所有数据。这消除了各种各样的攻击，并提供了额外监控和保护的机会。因此，我通常建议使用“发送所有流量”VPN 配置。这将允许您将应用程序完全移至内部，以便外部人员无法访问登录页面。
The app has very little control over the VPN. A properly configured HTTPS site (particularly employing bi-directional certificates) will give you the kind of protection you're looking for your application.
That said, I strongly advocate that business users send all data over the VPN in all cases. This eliminates a wide variety of attacks and provides the opportunity for additional monitoring and protection. Thus, I generally recommend using the "Send All Traffic" VPN configuration. This would allow you to move the app entirely internal, so that outsiders cannot access the login page.