Live data from Hacker News

How I got through Docker's censorship

parhamdoustdar.com

41–50 of 63 posts

Re: How I got through Docker's censorship

#41

> A few days ago I got a call from a lady that is studying her Masters degree in computer science (can you believe it?) This comment is not ok.

Consider the ways in which this comment could be interpreted in a way that doesn't insult women, which is how I assume you read it.

There are ways.

Re: How I got through Docker's censorship

#42

Earlier quoted context omitted.

I don't think it's that simple. Let's perform a gedankenexperiment. There is a country A that "misbehaves" — e.g. threatens its neighbourhoods and promises to hit them with nuclear weapons ASAP (in other words, promises nuclear offense). Quick note: in this context "country A" means "government of country A". There is also a country (or an alliance) B that is overwhelmingly more wealthy than A, has more military migh…

As someone growing up in a country that was under an embargo (born in '75 in Yugoslavia, spent my teenage years in 90's Serbia, under Milošević rule) and having seen it firsthand I can tell you that it never hits the ruling class and politicians - it only hits the common people - the more poorer you are the more you will feel it. Politicians and the rich people around them find the way to bypass it. During those time…

Yeah, I see what you mean and I know the feeling [1]. However, I think in the end the suffering becomes associated with the government anyway, so in the long term the strategy works. Here is some anecdotal evidence: current sanctions against Russia are precisely targeting companies that belong to elites. However, the Russian government imposed embargo on European food producers, in effect imposing self-sanctions on a wide population (food became a lot more expensive and really crappy here). They also managed to associate raising food prices with Western actions in the public eye, the stunt that worked really well at least on my parents and my friends' parents. However, now (after a year and a half) the propaganda starts to wear off and people become really unhappy with the government itself, despite their "rational understanding" of who's responsible for their troubles (the West). So yeah, it's a long game, but I can see the point of it.

The video is great, I wish best luck to your brother and his business!

[1]: I'm Russian and there is a ton of shit going on [in/because of] my country and a lot of people are unhappy about it (Ukrainians in particular). The issue is morally complicated AF and is closely related to a concept of collective responsibility, which isn't a clear-cut either. Personally I decided that it's wrong to completely separate myself from the actions of my govt (I know I could do more to prevent its misdeeds), so I feel some guilt about it and acknowledge when people have prejudices about me. Fortunately, most people (even more amazing, most of Ukrainians, despite all the shit Russia did to them) are nice and friendly when they see I don't consider appropriate to snatch chunks of neighbour's land.

Re: How I got through Docker's censorship

#43

I generally use VPN Gate [1] for all my IP-spoofing needs. The actual VPN servers are hosted by volunteers around the world. The client and server software VPN Gate uses is the open source SoftEther VPN [2], which I also use to host and connect to my own VPN. It's pretty great. [1] http://www.vpngate.net/en/ [2] http://www.softether.org/

Awesome, thanks! I'll definitely try these out!

If you're up for going the VPS route, there's an awesome project called Streisand on github that automates the entire process that sets up the server with multiple VPN protocols as well as TOR bridges:

https://github.com/jlund/streisand

Good luck!

Re: How I got through Docker's censorship

#45
I have found using ShadowSocks [0] to work best for me here in China. VPNs create one connection for all traffic (which is easier for China's GFW to detect/block/slow down). ShadowSocks creates a new TCP/UDP connection for each connection that it proxies.

My setup:

Cheap VPS server in Hong Kong [1] (5USD/month, 512 RAM, 2Mbit port) running the ShadowSocks server (libev version). I have upgrade the port to 20Mbits for an extra 10USD/month. The port could be upgrade to 50Mbits for 25USD/month.

For DNS I use ChinaDNS [2] to automatically filter out bad DNS results from China's censorship. It works by sending DNS queries to all multiple DNS server at the same time (give it a few local DNS servers and foreign DNS servers). The foreign DNS connections are tunneled through ShadowSocks.

ShadowSocks can work as a Socks5 proxy, tunnel or transparent proxy [3]. Socks5 is the easiest to use and can even do DNS lookups on the server. I use the transparent proxy [3] option, since it allows selecting which traffic should go over the proxy.

The socks5 option will try to proxy localhost & lan conections to the proxy server.

An optimized list of subnets can be generated using bestroutetb [4]. I load the subnets for China (can private LAN) into an ipset hash and use iptables rules to exclude those subnets from going over the proxy.

ChinaDNS [2] and bestroutetb [4] could be used for VPNs too. This could be used when trying to access different services (US, UK, etc..) that don't allow access from outside their country. Use one VPN for US and another for UK, then use bestroutetb [4] to build subnet lists for each country route traffic over the correct VPN.

0. https://shadowsocks.org/

1. http://www.36cloud.com/

2. https://github.com/shadowsocks/ChinaDNS

3. https://github.com/shadowsocks/shadowsocks-libev/blob/master...

4. https://github.com/ashi009/bestroutetb

edit: fix formatting and port prices.

Re: How I got through Docker's censorship

#47

It boils my blood when a harmless fellow developer faces trouble due to political mess created by dumb people.

I don't think it's that simple. Let's perform a gedankenexperiment. There is a country A that "misbehaves" — e.g. threatens its neighbourhoods and promises to hit them with nuclear weapons ASAP (in other words, promises nuclear offense). Quick note: in this context "country A" means "government of country A". There is also a country (or an alliance) B that is overwhelmingly more wealthy than A, has more military migh…

> democracies don't fight each other

The US & UK overthrew Iran's parliamentary democracy, and installed the Shah. (https://en.wikipedia.org/wiki/1953_Iranian_coup_d'%C3%A9tat)

The US is the world's most hyperviolent bully. (Just compare its capacity and use of violence to any other entity.) Bullies generally don't admit they're bullies, despite all evidence, and swear they're justified when smashing their victims.

Re: How I got through Docker's censorship

#48
post #17

> I am a completely blind back-end programmer So not only does he have to deal with the ridiculously hostile environment being a programmer in Iran. He's also blind. That truly gives some perspective on things.

His blog is exceptionally clean.

I don't know if that should be expected (cruft would be harder for assistive devices to read) or unexpected (he can't see; how can he keep it clean?)

Re: How I got through Docker's censorship

#49
post #17

> I am a completely blind back-end programmer So not only does he have to deal with the ridiculously hostile environment being a programmer in Iran. He's also blind. That truly gives some perspective on things.

His blog is exceptionally clean. I don't know if that should be expected (cruft would be harder for assistive devices to read) or unexpected (he can't see; how can he keep it clean?)

I had a colleague build my blog for me. I love his work because he created a clean theme, and it's very easy for me to navigate. I hadn't thought that it'd also be easier to read for sighted people. That's great to know!

Re: How I got through Docker's censorship

#50
Can someone not get in touch with this gentleman and just offer him a job already? Beyond his obvious technical knowledge and analytical approach to things, read through the comments here and you'll see a person who is levelheaded, humble, and seems genuinely happy to foster discussion with likeminded people. I wish I were a hiring manager at my company, but someone out there has to be. Snap this guy up before someone else does.
Post reply on HN