Sshuttle - tunnel all your traffic through ssh

Just a little nitpicking, when he talks about TunnelVision, he should have said:

  And nobody never notified me of any security flaws in my key exchange,

Instead of:

  And nobody ever found any security flaws in my key exchange,

Yeah, hell is in the details...

Regarding SSHuttle itself, I really liked it! (coming from someone who does all his browsing with ssh -D)

From the github.com page

This is how you use it:

    git clone git://github.com/apenwarr/sshuttle on your client machine. You'll need root or sudo access, and python needs to be installed.

    ./sshuttle -r username@sshserver 0.0.0.0/0 -vv

(You may be prompted for one or more passwords; first, the local password to become root using either sudo or su, and then the remote ssh password. Or you might have sudo and ssh set up to not require passwords, in which case you won't be prompted at all.)

That's it! Now your local machine can access the remote network as if you were right there. And if your "client" machine is a router, everyone on your local network can make connections to your remote network.

You don't need to install sshuttle on the remote server; the remote server just needs to have python available. sshuttle will automatically upload and run its source code to the remote python interpreter.

This creates a transparent proxy server on your local machine for all IP addresses that match 0.0.0.0/0. (You can use more specific IP addresses if you want; use any number of IP addresses or subnets to change which addresses get proxied. Using 0.0.0.0/0 proxies everything, which is interesting if you don't trust the people on your local network.)

Any TCP session you initiate to one of the proxied IP addresses will be captured by sshuttle and sent over an ssh session to the remote copy of sshuttle, which will then regenerate the connection on that end, and funnel the data back and forth through ssh.

Fun, right? A poor man's instant VPN, and you don't even have to have admin access on the server.

Yes, but you need a server in the US, so you can ssh to it.

Just so you know, for anything that works over a socks proxy you can already do that easily with ssh (using the -D switch, check the manpage). You then need to configure your client app to use it (e.g. if doing ssh -D locally, in google's chrome, go to tools -> preferences -> under the hood -> proxy settings -> manual, then fill with localhost and the port number)

To use OpenVPN you have to install extra software on the server and edit configuration files and set up keys. Not sure how that is easier?

The setup cost is higher, true, but the performance is better. TCP-over-TCP does not work well.