Orenosp Secure Reverse Proxy

Information on impact of the SSL/TLS renegotiation vulnerability
  • All versions of Orenosp released up to November 8th, 2009 are vulnerable. There is no user-configurable option to disable SSL renegotiation.
  • New version of Orenosp (1.2.11) for Windows is available now. This version will disable the SSL renogiation completely. Linux version will be available shortly.
  • Orenosp does not use SSL renegotiation for any of its features (such as SSL Client Authentication). Therefore customers can use this patched version without breaking any functionality with standard web browsers.
  • If you are using a specialized SSL-enabled file transfer program, please test this version thoroughly with your client software before rolling it out to the production environment. Although we are not aware of such a client, an SSL client program that initiates and requires SSL renegotiation to succeed will be imcompatible with this patched version.
  • Please send us any questions or concerns about this issue to support at-mark orenosv.com.
  • We have added a functionality to Server Certificate Manager that will look for SSL-servers with this SSL renegotiation vulnerability on your network. See detailed description here.
[To Japanese page]

Orenosp is a secure reverse proxy and load-balancer for HTTP/HTTPS and secure port forwarder for many TCP-based applications. It can be used as an low-cost alternative solution to VPNs using IPSec or PPTP. Orenosp runs on Windows platforms (NT, 2000, XP and 2003), Linux x86, and Mac OS X.

News: Since May 2009, Kousec Software, Inc. develops and markets this product and all other Orenosv.com products and freewares. For existing customers of Orenosv.com products, please this notice.

Usage Examples

Features

For details, see Orenosp Documentation Page.

Customer Cases

We have customer cases.

Deployment Topology

Here we show a couple of deployment toplogies. Click pictures to enlarge.

Placing Orenosp in DMZ for Generic HTTP Applications
Placing Orenosp in DMZ for Exchange 2003/2000 Servers
Clustering Orenosp in Active/Standby using Linux Heartbeat Clusterware

Other Deployment Scenario

Click pictures to enlarge.

Named-Based SSL Virtual Hosting for Low-Cost VPS
Rather than dedicating a global IP address to each virtual server, position VPSes behind a NAT and Orenosp. This way, each virtual server can have an SSL virtual host with independent PKI certificate (Orenosp uses TLS SNI). This will make sense when global IPv4 addresses are scarse resource.

System Requirements

Download

Orenosp Secure Reverse Proxy is a shareware program. You can download and try it for 90 days. For extended trial license, please contact Orenosv.com sales.
gtOrenoPC is another form of Orenosp package in that it is best suited for quick and easy SSL-enabled remote desktops. You can install Orenosp Secure Reverse Proxy and gtOrenoPC on the same PC.
To see changes in the latest version, please see this file.

Purchase License

You can purchase regular licenses from Orenosv.com. There are three product editions. Then, there are two purchase options for each edition. The following is a summary of product options.
Standard license Standard license with one-year support and upgrade entitlement Personal license Personal license with one-year support and upgrade entitlement gtOrenoPC license gtOrenoPC license with one-year support and upgrade entitlement
Functionality Full 3 pass rules for reverse proxying, 1 pass rule for SSL tunneling
(This edition should be choosed for a small HTTP/S reverse proxy environment)		 1 pass rule for reverse proxying, 3 pass rules for SSL tunneling
(This edition should be choosed for a small SSL tunneling remote desktop environment)
Support No support, except for self-support in Discussion Forums Email support for one year from the date of purchase No support, except for self-support in Discussion Forums Email support for one year from the date of purchase No support, except for self-support in Discussion Forums Email support for one year from the date of purchase
Upgrade No free upgrade. Only maintenance updates (1.x) Entitlement to upgrade to 2.x version, if 2.0 becomes available within one year from the purchase. No free upgrade. Only maintenance updates (1.x) Entitlement to upgrade to 2.x version, if 2.0 becomes available within one year from the purchase. No free upgrade. Only maintenance updates (1.x) Entitlement to upgrade to 2.x version, if 2.0 becomes available within one year from the purchase.
Field of Use a single physical PC

For payment methods currently available, we have 1) credit card payment via PayPal or 2) domestic (Japan only) wire transfer. For any other payment and pricing arrangements, please contact sales@orenosv.com.

Pay with credit card via PayPal

Solution Graphics
Product Price in US Dollars Price in Euros
gtOrenoPC license (Windows)
(SP-G001-001)		 89 USD
70 EUR
gtOrenoPC license (Windows) with one-year support and upgrade entitlement
(SP-PSM1-001)		 134 USD
105 EUR
Personal license (Windows)
(SP-P001-001)		 100 USD
80 EUR
Personal license (Windows) with one-year support and upgrade entitlement
(SP-PSM1-001)		 150 USD
120 EUR
Personal license (Linux/Mac OS X)
(SP-P001-003)		 100 USD
80 EUR
Personal license (Linux/Mac OS X) with one-year support and upgrade entitlement
(SP-PSM1-003)		 150 USD
120 EUR
Standard license (Windows)
(SP-FULL-001)		 500 USD
400 EUR
Standard license (Windows) with one-year support and upgrade entitlement
(SP-FSM1-001)		 750 USD
600 EUR
Standard license (Linux/Mac OS X)
(SP-FULL-003)		 500 USD
400 EUR
Standard license (Linux/Mac OS X) with one-year support and upgrade entitlement
(SP-FSM1-003)		 750 USD
600 EUR

Customization and Source Code Licensing

are also available. details.

About

Since May 2009, Kousec Software, Inc. develops and markets this product and all other Orenosv.com products and freewares. For existing customers of Orenosv.com products, please this notice.
There is no service disruptions or any impacts on existing Orenosv.com customers. The following email contacts remain the same.

 

Kousec Software, Inc.