SSH over socks 5 would be a better option than OpenBSD
Since you need a secure server on the other end to ssh into, why not just go with OpenBSD anyway?
Be your own VPN provider with OpenBSD
61–63 of 63 posts
Re: Be your own VPN provider with OpenBSD
#62Another solution I'd recommend is SoftEtherVPN[1]. It's a bit easier to configure and supports multiple protocols, including OpenVPN. [1] https://github.com/SoftEtherVPN/SoftEtherVPN/
Back when I tried SoftEther several months back, by way of VPN Gate, the connections seemed pretty unreliable compared to OpenVPN. I think the VPN Gate software locked down the options in SoftEther, though. Packet loss affected gaming and video streaming in particular. Casual web browsing was OK.
If you are talking about VPNGate, the public VPN gateways, VPNGate can be a mixed bag. As far as I know, those connections are maintained by varying network environments; some are probably better than others.
I use SoftEther server/client for LAN access for work and home, and it works decently well. (Only thing is things like compression and certificate based authentication only works over SoftEther client, although support for certificate auth for other protocols are on its roadmap.)
Re: Be your own VPN provider with OpenBSD
#63If anyone's ever looking for an even quicker hack, ssh has built-in the ability to act as a SOCKS5 proxy, tunneling your traffic over ssh to whatever remote machine you might have access to: $ ssh -D 1080 myserver.myhost.net Then configure Chrome or Firefox or whatever to use a SOCKS5 proxy on localhost, port 1080. (N.B. that this does not tunnel DNS lookups by default.) The OpenVPN-based route is the way to go for s…
You can get the OpenVPN route quite seamless from a client perspective (server is still a pain in the ass to set up). You can bundle all the configuration for a particular client into a .ovpn file - this includes the client and CA certificates. I use this on iPhones and iPads, with the OpenVPN iOS app - works great for a family of iOS devices that need access to some geo-locked services.
Agreed, I set myself up an OpenVPN server on digitalocean without too much of a hassle. The easy-rsa utilities make the whole process quite simple. It has frankly been a life saver for me, as it allows me to bypass all restrictions imposed where I live (Oman).