VPN Architecture
It also supports remote users that have any type of VPN endpoint (a laptop, desktop system, or tablet, for example). A site-to-site VPN, also known as a LAN-to-LAN or WAN VPN, supports secure connections between LANs over intermediary public networks.
Many VPN experts recommend OpenVPN as the most secure protocol. It uses 256bit encryption as a default but also offers other ciphers such as 3DES triple data encryption standard, Blowfish, CAST128, and AES Advanced Encryption Standard.
The most commonly used tunneling protocols in the VPN industry are PPTP, L2TP/IPSec, SSTP, and OpenVPN and the worlds best VPN services should offer most or all of them.
Tunnel mode, which is used in most VPNs, creates virtual tunnels between two subnets. This mode encrypts the payload and the IP header. The principal advantage of IPSec is that it offers confidentiality and authentication at the packet level between hosts and networks.