blocks|key|3341445|text|两者都能有效地满足你的需要。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3341446|您是否需要使用一个而另一个取决于您的用例。根据您所描述的，只要没有其他需求，我就会使用TLS，因为它在大多数网络体系结构上只需要很少的额外工作。|3341447|IPSec设置起来有点复杂，但它确实提供了额外的安全选项。|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|H|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|I|8|@]|9|@]|A|$]]]|F|$]]

Both will do what you need effectively.

Whether you need to use one over the other depends on your use case. From what you have described, as long as there aren't other requirements, I'd go with TLS, as it requires very little additional work on most network architectures.

IPSec is just a little more convoluted to set up - but it does provide additional security options.

blocks|key|5336747|text|两者都是有效的。我觉得这取决于你如何很好地配置协议。配置得越好，安全性就越好。例如:更好的algos+(例如hmac_md5代替md5)、公钥密码系统等，比如在ipsec中选择主模式代替攻击模式，以获得更多的安全性等等。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5336748|它还取决于用例。在本地TLS/ssl上，ipsec有更多的选项。|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|E|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|F|8|@]|9|@]|A|$]]]|D|$]]

Both are effective.
I feel it depends on how nicely you configure your protocols.
The Better you configure the better security you get.
example: better algos (example hmac_md5 in place of md5), public -key-cryptosystems etc
Like choosing main mode in ipsec in place of aggressive mode for more security etc.
Choosing Certificates in place of preshared key etc

It also depends on the use case. 
On local TLS/ssl as ipsec has more options .

blocks|key|5336696|text|首先，完全停止使用FTP。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5336697|最常见的选择是改用SFTP。|5336698|禁用弱密码套件，比如使用RC4的加密套件。|unordered-list-item|5336699|你还可以采取其他强化措施。|5336700|下一个常见的选择是使用FTPS。|5336701|5336702|5336703|如果愿意，还可以使用OpenVPN或其他基于TLS的VPN或IPSec+VPN作为附加层。|5336704|正确地配置IPSec和OpenVPN是同样有效的|5336705|使用好的，现代的密码套件|5336706|尽可能使用证书，而不是基于密码的身份验证。|5336707|5336708|您也可以加密文件本身。|5336709|更多的图层帮助|5336710|VPN第一|5336711|安全文件传输秒|5336712|第三种加密文件。|entityMap^0|0|0|0|0|0|0|0|0|1|1|1|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|16|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|17|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|18|8|@]|9|@]|A|$]]|$1|G|3|H|5|F|7|19|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|1A|8|@]|9|@]|A|$]]|$1|K|3|E|5|F|7|1B|8|@]|9|@]|A|$]]|$1|L|3|H|5|F|7|1C|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|1D|8|@]|9|@]|A|$]]|$1|O|3|P|5|F|7|1E|8|@]|9|@]|A|$]]|$1|Q|3|R|5|F|7|1F|8|@]|9|@]|A|$]]|$1|S|3|T|5|F|7|1G|8|@]|9|@]|A|$]]|$1|U|3|-4|5|6|7|1H|8|@]|9|@]|A|$]]|$1|V|3|W|5|6|7|1I|8|@]|9|@]|A|$]]|$1|X|3|Y|5|6|7|1J|8|@]|9|@]|A|$]]|$1|Z|3|10|5|F|7|1K|8|@]|9|@]|A|$]]|$1|11|3|12|5|F|7|1L|8|@]|9|@]|A|$]]|$1|13|3|14|5|F|7|1M|8|@]|9|@]|A|$]]]|15|$]]

First, quit using FTP entirely.

The most common choice is to use SFTP instead

<ul>
<li>Disable weak cipher suites like ones using RC4.</li>
<li>There are other hardening steps you can take as well.</li>
</ul>

The next common choice is to use FTPS instead.

<ul>
<li>Disable weak cipher suites like ones using RC4.</li>
<li>There are other hardening steps you can take as well.</li>
</ul>

If you would like, you can ALSO use OpenVPN or another TLS based VPN, or an IPSec VPN, as an additional layer.

<ul>
<li>Properly configured, IPSec and OpenVPN are equally effective

<ul>
<li>Use good, modern cipher suites</li>
<li>Use certificates whenever possible, rather than password based authentication</li>
</ul></li>
</ul>

You can also encrypt the files themselves.

More layers helps 

<ul>
<li>VPN first</li>
<li>secure file transmission second</li>
<li>encrypted files third.</li>
</ul>

blocks|key|5336774|text|SSL/TLS上的FTP通常称为FTPS。这方面的问题是，默认情况下，初始套接字连接用于控制，第二个套接字用于数据传输。第二个套接字可能使用一系列端口号，这使得限制访问变得更加困难，并且需要应用程序和SSL层之间的紧密集成(您不能简单地将FTP客户端指向阻止点)。虽然可以使用单一通道(被动模式)，但在两端启用这种方式可能会造成并发症。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5336775|IPSEC的问题较少，根据配置方式的不同，将提供更低的延迟，但如果连接跨越NAT，则需要禁用端点身份验证。IME在配置ipsec连接方面付出了更多的努力，尽管自从我这样做到现在已经有一段时间了，因此FTPS对于不频繁的传输可能更容易。|5336776|真的，你在比较苹果和橘子。如果不知道你的有效性标准是什么，我们就不能说什么更有效。|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|H|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|I|8|@]|9|@]|A|$]]]|F|$]]

FTP over SSL/TLS is usually known as FTPS. The problem with this is that, by default, the initial socket connection is used for control, and a second socket is established for data transfers. This second socket may use a range of port numbers making it more difficult to restrict access and requires close integration between the application and SSL layer (you can't simply point your FTP client at stunnel). Although it's possible to use a single channel (passive mode) enabling this at both ends can pose complications.

This is less of an issue with IPSEC, and, depending on how it is configured, will give lower latency, but you need to disable end point authentication if your connection crosses NAT. IME there is more effort in configuring an ipsec connection, although it has been some time since I did such a thing, hence FTPS might be easier for infrequent transfers.

Really you are comparing apples and oranges here. And we can't say what is more effective without knowing what your criteria for effectiveness are.

Which of those two protocols is the most effective for sending data from a client to a server on a local network (knowing that I aim to use it for FTP traffic)?

<a href="https://i.stack.imgur.com/iBe08.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/iBe08.png" alt="enter image description here"></a>

Which of the TLS/SSL and IPsec protocols is effective?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

这两种协议中哪一种最能有效地将数据从客户端发送到本地网络上的服务器(知道我的目标是将其用于FTP通信)？📷

问哪些TLS/SSL和IPsec协议是有效的？
EN

回答 4

Security用户

Security用户

Security用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问哪些TLS/SSL和IPsec协议是有效的？EN

回答 4

Security用户

Security用户

Security用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问哪些TLS/SSL和IPsec协议是有效的？
EN