Launch an EC2 instance in the US region (Ubuntu, open ports 22 and 1194), then connect via SSH and run the OpenVPN install script. Generate the .ovpn profile with the script and download it to your local machine. Finally, import the file into the OpenVPN client and connect to route traffic through the US server.
Ask HN: The government of my country blocked VPN access. What should I use?
191–200 of 775 posts
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#192I'm currently traveling in Uzbekistan and am surprised that wireguard as a protocol is just blocked. I use wireguard with my own server, because usually governments just block well known VPN providers and a small individual server is fine. It's the first time I've encountered where the entire protocol is just blocked. Worth checking what is blocked and how before deciding which VPN provider to use.
Cloak + wireguard should work fine on the server side. The problem is that I didn't find any clients for Android and I doubt there are clients for iOs that can (a) open a cloak tunnel and then (b) allow wireguard to connect to localhost...
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#193Earlier quoted context omitted.
Very possible, though many of our users are saying that in network environments where WireGuard is blocked they were able to use Obscura.
Hey, I went to take a look at Obscura and I like the ideas but I can't find the source code. You are making some bold claims but without the source I can't verify those claims. Any plans to open-source it?
We should link it in more places, apologies!
Here it is: https://github.com/Sovereign-Engineering/obscuravpn-client
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#194OP, you can rent a VPS from a reputable and cheap provider within the NA region - OVH, Vultr, Linode etc. are decent. Also check out lowendtalk.com Then, setup Tailscale on the server. You can VPN into it and essentially browse the internet as someone from NA.
From some of the comments here I get why you are downvoted. But tbh I would also have gone that route. So are we just inexperienced? I read here indeed that wireguard is very easily blocked. It was at the company I worked for but then I just set port 23 (who uses ftp anyways??). And it worked. But why is this still bad then?
Obviously I have 0 real experience with this.
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#195Use an Actual Private Network? Radio links that you control. Peer with someone who owns a Starlink terminal. Rent instances in GCP's Jakarta datacenter.
https://en.wikipedia.org/wiki/AMSAT-OSCAR_7#Use_by_Polish_an... <-- "Radio links you control", and is hard to block/detect.
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#196I'm currently traveling in Uzbekistan and am surprised that wireguard as a protocol is just blocked. I use wireguard with my own server, because usually governments just block well known VPN providers and a small individual server is fine. It's the first time I've encountered where the entire protocol is just blocked. Worth checking what is blocked and how before deciding which VPN provider to use.
[deleted]
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#197I'd recommend using Outline - it's a one click setup that lets you provision your own VPN on a cloud provider (or your own hardware). Since you get to pick where the hardware is located and it is just you (or you and a small group of friends & family) using the VPN, blocking is more difficult. If you don't want the hassle of using your own hardware you can rent a Digital Ocean droplet for https://getoutline.org/
I’ve set this up for friends in fairly heavily censored countries before, it has been working well so far, but as others have said, this is a cat and mouse game
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#198What is going on if you don’t mind my asking? Our local news does not mention anything. Nor does ddging help? Any sources?
Massive protests have occurred due to obvious government corruption. In particular the housing allowance for a month for a parliamentarian is now ten times the minimum wage for a month.
https://www.theguardian.com/world/2025/aug/26/indonesia-prot...
Sorry I don't have a better freely accessible source, maybe someone with more knowledge can fill it in.
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#199Hello! I've got experience working on censorship circumvention for a major VPN provider (in the early 2020s). - First things first, you have to get your hands on actual VPN software and configs. Many providers who are aware of VPN censorship and cater to these locales distribute their VPNs through hard-to-block channels and in obfuscated packages. S3 is a popular option but by no means the only one, and some VPN prov…
I wonder if it can be embedded in a video stream, like a video of a lava lamp that you always have open, but the lsb of ever byte is meaningful.
Re: Ask HN: The government of my country blocked VPN access. What should I use?
#200Earlier quoted context omitted.
A country can and absolutely will block known VPN ingress points. There are two tricks that we can use to circumvent this: - Host on a piece of infrastructure that's so big that you can't effectively block it without causing a major internet outage (think: S3, Cloudflare R2, etc). Bonus points if you can leverage something like ECH (ex-ESNI) to make it harder to identify a single bucket or subdomain. - Keep spawning…
I've heard of domain fronting, where you host something on a subdomain of a large provider like Azure or Amazon. Is this what you're talking about when you say > - Host on a piece of infrastructure that's so big that you can't effectively block it without causing a major internet outage (think: S3, Cloudflare R2, etc). How can one bounce VPN traffic through S3? Or are you just talking about hosting client software, i…
That's generally for distribution, but yeah, it's a form of domain fronting.
There are some more niche techniques that are _really_ cool but haven't gained widespread adoption, too, like refractive routing. The logistics of getting that working are particularly challenging since you need a willing partner who'll undermine some of their trustworthiness with some actors to support (what is, normally, to them) your project.