ssh tunnel always works for me
Ask HN: How would you tunnel through GFW?
11–20 of 33 posts
Re: Ask HN: How would you tunnel through GFW?
#12TOR still works fine -- you just need to configure it to use bridges. https://www.torproject.org/bridges
Thanks, I will try this if I get free time, but Tor is difficult to configure. And I can not even access the bridge link you gave.
Maybe this link to a PDF version of the info will work: http://dl.getdropbox.com/u/34019/tor-bridges.pdf
If it doesn't, I'll send you the stuff per email.
Re: Ask HN: How would you tunnel through GFW?
#13Once a new method is found, people will flood to it, then it will be noticed, and banned. Since GFW was created, this process happened repeatedly. So IMHO, there's no silver bullet.
It's a coevolutionary arms race, it follows a predictable cycle of escalating attacks and defenses until a stable equilibrium is reached, or the environment changes.
The thing is that in this case the government of China appears to have decided that it cannot afford to do without the internet; and that means that they cannot 'win' in the ultimate sense, as by allowing filtered communication they are opening a channel on which illicit communication can be carried. And from what little I know of it, the chinese government isn't attempting to enforce a particular orthodoxy, they just don't want to be swept away by the social changes that are in progress. My sense is that a few foreigners looking at strange ideas doesn't bother the Chinese government, but large groups of young people getting exposed to new and exciting ideas all at once does.
Re: Ask HN: How would you tunnel through GFW?
#14All bypass methods can be categorized into two: 1. Methods that requires a 3rd-party server 2. Methods that do NOT requires a 3rd-party server Currently mainland underground hackers focus on methods #2, and as far as I know 3 POC works fine through GFW on OSI level 3, 4, and 7, unless the target is an IP ban.
What does "3 POC" mean? I'm interested in learning about methods that don't require a 3rd party.
Re: Ask HN: How would you tunnel through GFW?
#15I thought the GFW worked by sending a RST to any TCP connection that it didn't like. If you ignore the RST then the connection goes ahead. Has that changed?
Re: Ask HN: How would you tunnel through GFW?
#16All bypass methods can be categorized into two: 1. Methods that requires a 3rd-party server 2. Methods that do NOT requires a 3rd-party server Currently mainland underground hackers focus on methods #2, and as far as I know 3 POC works fine through GFW on OSI level 3, 4, and 7, unless the target is an IP ban.
What does "3 POC" mean? I'm interested in learning about methods that don't require a 3rd party.
3 proofs-of-concept. The idea is simple, use garbled protocol to make GFW confused but destination servers understand. And inject designed low TTL packets to GFW.
Re: Ask HN: How would you tunnel through GFW?
#17Just read a recent blog post about this:
http://zygote.egg-co.com/5-interesting-facts-about-the-inter...
Re: Ask HN: How would you tunnel through GFW?
#18OpenVPN + NAT.
Unlike most VPN technologies which rely on additional encapsulation in Layer 3/4 like GRE and IPSec (which have signatures that can be filtered out easily without deep packet inspection), OpenVPN works over userspace TUN/TAP drivers and a UDP transport. So, it just looks like plain old application-layer UDP traffic. The standard port it uses (1194) can be changed easily.
Although not impossible, it would be very hard to block something like that without catching in the same rules many other ordinary applications that use UDP, such as most online games, Skype, etc.
It does, however, require that you tunnel to a concentrator outside the GFW.
Re: Ask HN: How would you tunnel through GFW?
#19All bypass methods can be categorized into two: 1. Methods that requires a 3rd-party server 2. Methods that do NOT requires a 3rd-party server Currently mainland underground hackers focus on methods #2, and as far as I know 3 POC works fine through GFW on OSI level 3, 4, and 7, unless the target is an IP ban.
There is also now DNS poisoning of high profile sites like Facebook and Twitter. So be sure to use a DNS proxy that is outside China.
Re: Ask HN: How would you tunnel through GFW?
#20Earlier quoted context omitted.
Thanks, I will try this if I get free time, but Tor is difficult to configure. And I can not even access the bridge link you gave.
Maybe this link to a PDF version of the info will work: http://dl.getdropbox.com/u/34019/tor-bridges.pdf If it doesn't, I'll send you the stuff per email.
It works, thank you so much for the stuff.