Technology

Is OpenVPN not just SSL traffic?

They can block the default port and IP addresses owned by VPN service providers, but is there any way to block the protocol without block all encrypted web traffic?

Shithole country

using a vpn is also illegal in russia since 2017 😅

annnd another dictatorship box checked off the list... wont be long now

But how are their propaganda farms going to be able to pretend they are in your country now?

I live in Russia and I have vps with wireguard vpn in Netherlands. At the current moment it works for me pretty well except the some connection failures two days ago. But they were very short. But I don't know how long my vps will be accessible with these fucking blocking.

Proton vpn has a feature that can be turned on for oppressive governments, ‘alternate routing’ I believe. Would that be sufficient or no?

Now comes the Great Russian Firewall.

ProtonVPN has a "stealth" protocol. Does anyone know if that breaks through?

I am pretty confused by the article.

What I'd expected based on what I've seen so far was that the Kremlin would not care what protocols are used, just whether the a given VPN provider was in Russia and whether it provided the government with access to monitor traffic in the VPN.

So, use whatever VPN protocol you want to talk to a VPN provider where we can monitor or block traffic by seeing inside the VPN. You don't get to talk to any VPN providers for which we can't do that, like ones outside Russia, and the Russian government will do what it can to detect and block such protocols when they pass somewhere outside of Russia.

But that doesn't seem to fit with what the article says is happening.

The media in Russia reports that the reason behind this is that the country isn’t banning specific VPNs. Instead, it’s putting restrictions on the protocols these services use.

According to appleinsider.ru, the two protocols that are subject to the restrictions are:

• OpenVPN
• WireGuard

A Russian VPN provider, Terona VPN, confirmed the recent restrictions and said its users are reporting difficulties using the service. It’s now preparing to switch to new protocols that are more resistant to blocking.

I don't see what blocking those protocols internal to Russia buys the Kremlin -- if Terona conformed to Russian rules on state access to the VPN, I don't see how the Kremlin benefits from blocking them.

And I don't see why Russia would want to permit through other protocols, though maybe there are just the only protocols that they've gotten around to blocking.

EDIT: Okay, maybe Terona doesn't conform to state rules or something and there is whitelisting of VPN providers in Russia actually happening. Looking at their VK page, it looks like Terona's top selling point is "VPN access to free internet" and they have a bunch of country flags of countries outside of Russia. So maybe Russia is blocking VPN connectivity at the point that it exits Russia, and it's affecting Terona users who are trying to use a VPN to access the Internet outside Russia, which would be in line with what I would have expected.

It was not working 2 day on mobile operators, now waiting full shutdown

Russia is a terrorist state. #SlavaUkraini #ArmUkraineForVictory

Is it possible to bypass this block? Say, embedding VPN packets within a different protocol?

Is this just address/port blocking, or DPI of some kind? I'm wondering what they can trigger off?

Shadowsocks/ShadowsocksR/vmess/vless/trojan:

Couldn't you just use any server/droplet/AWS instance via SSH to get around this law? Seems much simpler.

This has been happening intermittently since 2012 or something.

Not wg, cause it wasn't popular then.

HTTP\HTTPS tunneling etc are not that hard, ya knaw.

Or encrypted GRE, ffs.

!chapotraphouse@hexbear.net will love this.

After a discussion that lasted for way too long, it appears that they like censorship.

They think that this is a perfectly reasonable argument: https://youtu.be/QFgcqB8-AxE and that the government knows better and thus information should be suppressed.

Absolutely ridiculous...

However will they get messages through??