|
|
|
|
|
|
Digg |
|
|
|
In order for this solution to work, the client software requires direct access to the port of a specific server (for example, port 443). In China's case, this is obviously permitted, so that any sports journalist who can access his newspaper's content management system (CMS) via HTTPS from Beijing can also obtain full and uncensored Internet access through an OpenVPN tunnel.
Since OpenVPN uses the standardized TUN/TAP devices, both the VPN server and clients work on Linux, Windows and also Mac systems. Connections are stable, very tolerant of errors and thanks to adaptive compression and freely definable encryption key lengths, both fast and secure. The author has used the software on his laptop for almost five years to surf secretly, without problems and independent of the bandwidth available, using connections as diverse as GPRS, UMTS, Wireless LAN, dial-up or Ethernet.
Occasionally it is necessary to provide OpenVPN with the IP address of a proxy server, for example using the "http-proxy" option in the configuration file. The software is then able to disguise itself, and appear to the proxy as a Mozilla or Internet Explorer web browser of whatever generation you choose. Authenticating proxies that use NTLM, for example, are also supported. As long as the proxy permits direct connection to HTTPS pages, as is required by the operators of secure banking portals, online shops or intranets, then the OpenVPN connection can be established and uncensored surfing is possible.
An impressive number of GUI tools is available for OpenVPN. The software comes in Windows, Mac and Linux versions, and it has been a standard part of the major Linux distributions for years. Users of Debian, Ubuntu, Red Hat and openSUSE can install the software comfortably using their distribution's package management systems, while more and more appliances are also integrating OpenVPN. Over the course of its development, the VPN software has won over many fans, thanks to its comprehensive functionality and high degree of flexibility. Ease of configuration and great performance and security mean it is a practical tool that can solve a wide range of networking problems with ease. With OpenVPN even able to speed up typical setups considerably, the software is also very popular among those who like to play games online. Perhaps they will soon be joined by the journalists in their fervor for the solution.
See article on configuring openVPN here.
|
|
|
Comments
Internet designed to defeat censorship
"John S. Wolter" <johnswolter@wolterworks.com> Oct 05, 2008 5:53pm GMT
The Internet was originally designed to deliver Military messages even during widespread nuclear bombings. It was assumed the communications networks would be the first targets. So the choice of packet based networks with multiple communications routes was selected. The messages would then have a good chance of getting through.Fast forward to now. The Internet uses the same basic message packet design features. When censorship is attempted the network is looks for a different way to deliver the messages. This alternative routing has become a part of the culture surrounding the Internet. Not only is the network looking for alternative routes but people are now behaving like the network. They immediately look for ways to use available network resources and software to achieve the free flow of blocked messages.
Free and Open Source Software(FOSS) plays an important role by providing software that can be molded to new and unanticipated uses. FOSS provides the tools, in this case OpenVPN, to get the messages through the blockages.
Been there, done that
Darren M Aug 18, 2008 5:24pm GMT
I did this about 2 years ago for a client who went to live in Saudi Arabia. The government controlled ISP had blocked VOIP so they could force their own paid for VOIP on everyone.He connected to a UK server with OpenVPN and could use Skype fine over the tunnel.
Cryptography is the saviour of Internet privacy.