以下のOpenVPN構成オプションのうちどちらが、前方へOpenVPNを更なる処理のためにOpenVPNサーバーを動かすLinuxホストに箱を渡す代わりに、それ自体VPNクライアントの間で箱をネットワーク化させますか?
正解:B
Explanation
The client-to-client option in OpenVPN enables the VPN server to forward packets between VPN clients internally, without sending them to the IP layer of the host system. This means that the host networking stack does not see or process the client-to-client traffic at all. This option can improve the performance and efficiency of the VPN, as well as reduce the load on the host system. However, it also means that the VPN server cannot apply any firewall rules or routing policies to the client-to-client traffic, as it would if the traffic passed through the host IP layer. Therefore, this option should be used with caution and only when the VPN clients are trusted and isolated from other networks. References:
OpenVPN 2.x HOWTO, section "Client-to-client"
OpenVPN 2.4 man page, option "-client-to-client"