Live data from Hacker News

China Cracks Down on VPN Services After Censorship System ‘Upgrade’

techcrunch.com

21–30 of 94 posts

Re: China Cracks Down on VPN Services After Censorship System ‘Upgrade’

#21

My old company has its dev team in Shanghai, we used multiple VPNs: openvpn and a Cisco vpn; we setted them on company's router.Normally it's ok except some special days like every year's session.

Isn't that illegal in China? Or not? Are there any repercussions if you get caught evading in one way or another their national firewall?

Re: China Cracks Down on VPN Services After Censorship System ‘Upgrade’

#22
post #3

This is the reason I no longer work from Shanghai. Attempting to do anything in the tech spave while constantly playing cat and mouse got to be such a productivity killer that it was becoming impossible to work. You'd rarely know if failures were because of some Firewall nonsense or something else. It's a tragedy really. I am one guy, but I've since hired several developers and my little company is gaining traction -…

I was in Shanghai last month & in previous years bypassing the firewall was not too much of a hassle. When I arrived in Shanghai for the holidays this year my old VPN provider didn't work anymore, plus they added DNS poisoning and bandwidth throttling. I actually upgraded TO StrongVPN, which seems to be one of the affected VPN services now. My conclusion was that it has become effectively impossible to run a western…

Sorry but aren't you better off with a DO VPS running an OpenVPN?

I mean using a VPN service or Tor public server is like weaving a banner saying Hey I'm trying to bypass you!.

I was able to browse the internet connecting through my home's OpenVPN (DDNS and all) when I was in China (for vacations mostly and some work) without any problems.

Of course a home ADSL pipe is good only for 'www' and maybe not even for that, but now a VPS costs ~ 10 USD per month and has enough bandwidth for most people.

Re: China Cracks Down on VPN Services After Censorship System ‘Upgrade’

#23
post #16
post #5

I'm living in Shanghai. Still connected fine over a IPSec tunnel. I run my own VPN server on Rackspace/AWS (only 2 public IPs), the connection is and has been relatively stable (about a year). 12MBit/s from Shanghai to the IPSec server in Hong Kong, 38ms consistent ping (100MBit/s connection). Using a Cisco SMB router, so the connection is pure IPSec and standard ports.

How do you handle access from mobile devices? I found managing a VPN (from iPhone) more trouble than it's worth. Moving between networks often dropped the connection long enough to kill the VPN.

Running my own L2TP/IPSec server for that as well. Older versions of iOS consistently closes the VPN connection when the phone was locked (or not connected via USB). iOS 8 is more stable it seems, because it keeps the VPN connection active for longer.

Re: China Cracks Down on VPN Services After Censorship System ‘Upgrade’

#24
post #5

I'm living in Shanghai. Still connected fine over a IPSec tunnel. I run my own VPN server on Rackspace/AWS (only 2 public IPs), the connection is and has been relatively stable (about a year). 12MBit/s from Shanghai to the IPSec server in Hong Kong, 38ms consistent ping (100MBit/s connection). Using a Cisco SMB router, so the connection is pure IPSec and standard ports.

Cost?

Re: China Cracks Down on VPN Services After Censorship System ‘Upgrade’

#25
post #21

My old company has its dev team in Shanghai, we used multiple VPNs: openvpn and a Cisco vpn; we setted them on company's router.Normally it's ok except some special days like every year's session.

Isn't that illegal in China? Or not? Are there any repercussions if you get caught evading in one way or another their national firewall?

I think it's ok since CCP denied the existence of GFW; and we would just do things related to work,it's like an unwritten rule.

Re: China Cracks Down on VPN Services After Censorship System ‘Upgrade’

#26
post #21

My old company has its dev team in Shanghai, we used multiple VPNs: openvpn and a Cisco vpn; we setted them on company's router.Normally it's ok except some special days like every year's session.

Isn't that illegal in China? Or not? Are there any repercussions if you get caught evading in one way or another their national firewall?

[deleted]

Re: China Cracks Down on VPN Services After Censorship System ‘Upgrade’

#27
post #5

I'm living in Shanghai. Still connected fine over a IPSec tunnel. I run my own VPN server on Rackspace/AWS (only 2 public IPs), the connection is and has been relatively stable (about a year). 12MBit/s from Shanghai to the IPSec server in Hong Kong, 38ms consistent ping (100MBit/s connection). Using a Cisco SMB router, so the connection is pure IPSec and standard ports.

Cost?

Instance cost for Rackspace is basically nothing depending on data transfer, they have a relatively new program they call Developer+[0] which is basically 50USD for free per month. The VPN server software is open-source, I use OpenSWAN (couldn't get the new fork Libreswan up an running correctly).

[0] https://developer.rackspace.com/developer-plus/faq/#what_is

Re: China Cracks Down on VPN Services After Censorship System ‘Upgrade’

#28
post #21

Earlier quoted context omitted.

Isn't that illegal in China? Or not? Are there any repercussions if you get caught evading in one way or another their national firewall?

I think it's ok since CCP denied the existence of GFW; and we would just do things related to work,it's like an unwritten rule.

Cisco is known to support "lawful intercept" protocols in their routers (in fact they were the ones to propose it to IETF a decade ago), so I wonder if they find it ok to not censor your connection because they can already spy on it. This way at least they can check if it's really for "work". Other VPNs who they know aren't used for work, get blocked.

Re: China Cracks Down on VPN Services After Censorship System ‘Upgrade’

#30
My company hires freelancers for China-related research. Contributors from Mainland China would be ideal. But my reliance on services like Google Drive means that I typically end up with people from HK, Taiwan, Singapore and Malaysia. It's simply much more convenient.
Post reply on HN