Sezvo isu tichiwedzera kurambidzwa kuwana zviwanikwa zvakasiyana pane network, nyaya yekupfuura ichivharira inova yakanyanya kudzvanya, izvo zvinoreva kuti mubvunzo wekuti "Nzira yekunzvenga sei kuvharira nekukurumidza?" inova yakakosha.
Ngatisiyei nyaya yekubudirira maererano nekupfuura DPI whitelists kune imwe kesi, uye ingoenzanisa kuita kweakakurumbira block bypass maturusi.
Chenjerera: Pachave nemifananidzo yakawanda pasi pevapambi muchinyorwa.
Disclaimer: chinyorwa ichi chinofananidza kuita kweanozivikanwa VPN proxy mhinduro pasi pemamiriro ari padyo ne "yakanaka". Mhedzisiro yakawanikwa uye yakatsanangurwa pano haingoenderane nezvawawana muminda. Nekuti iyo nhamba iri muyedzo yekumhanya kazhinji haizotsamira pane simba reiyo bypass chishandiso, asi kuti mupi wako anoifambisa sei.
Maitiro
3 VPS yakatengwa kubva kune cloud provider (DO) munyika dzakasiyana pasi rose. 2 muNetherlands, 1 muGermany. Iyo yakanyanya kugadzirwa VPS (nenhamba yemacores) yakasarudzwa kubva kune inowanikwa kune iyo account pasi pekupihwa kwecoupon kiredhiti.
Yakavanzika iperf3 server inoiswa pane yekutanga Dutch server.
Pane yechipiri Dutch server, akasiyana maseva e block bypass maturusi anoiswa rimwe nerimwe.
Mufananidzo weLinux desktop (xubuntu) ine VNC uye chaiyo desktop inoiswa paGerman VPS. Iyi VPN ndeye mutengi ane mamiriro, uye akasiyana-siyana VPN proxy vatengi vanoiswa uye vanotangwa pairi.
Yekumhanyisa kuyerwa kunoitwa katatu, isu tinotarisa paavhareji, isu tinoshandisa matatu maturusi: muChromium kuburikidza newebhu kumhanya bvunzo; muChromium kuburikidza ne fast.com; kubva pane console kuburikidza ne iperf3 kuburikidza ne proxychains3 (paunoda kuisa iperf4 traffic mu proxy).
Kubatana kwakananga "mutengi" -server iperf3 inopa kumhanya kwe 2 Gbps mu iperf3, uye zvishoma zvishoma mu fastspeedtest.
Muverengi anobvunza anogona kubvunza, "nei usina kusarudza speedtest-cli?" uye achava akarurama.
Speedtest-cli yakave isina kuvimbika uye isina kukwana nzira yekuyera kubuda, nekuda kwezvikonzero zvandisingazive. Zviyero zvitatu zvakatevedzana zvinogona kupa mhedzisiro mitatu yakasiyana zvachose, kana, semuenzaniso, kuratidza kubuda kwakakwira zvakanyanya kupfuura kumhanya kwechiteshi cheVPS yangu. Zvichida dambudziko ndere ruoko rwangu rwakarukwa, asi zvaiita sezvisingabviri kuita tsvakiridzo nechombo chakadaro.
Kana iri mibairo yenzira nhatu dzekuyera (speedtest fastiperf), ini ndinoona zviratidzi zveiperf seyakanyanya uye yakavimbika, uye fastspeedtest sereferensi. Asi mamwe maturusi ekupfuura haana kubvumira kupedzisa zviyero zvitatu kuburikidza ne iperf3 uye mumamiriro ezvinhu akadaro, unogona kuvimba nekukurumidza.
speed test inopa mhinduro dzakasiyana
Zvishandiso
Pakazara, makumi maviri nemana akasiyana maturusi ekupfuura kana musanganiswa wavo akaedzwa, kune imwe neimwe yazvo ini ndichapa tsananguro diki uye maonero angu ekushanda navo. Asi zvakanyanya, chinangwa chaive chekuenzanisa kumhanya kwe shadowsocks (uye boka reakasiyana obfuscators ayo) openVPN uye wireguard.
Muchinyorwa ichi, ini handisi kuzokurukura zvakadzama mubvunzo we "nzira yakanaka yekuvanza traffic kuti irege kubviswa," nekuti kuvharira kuvharika ndiyo nhanho inoshanda - isu tinochinjika kune izvo censor inoshandisa uye kuita nechikonzero ichi.
Mhinduro
Strongswanipsec
Mukuona kwangu, zviri nyore kwazvo kumisa uye zvinoshanda zvakatsiga. Imwe yemabhenefiti ndeyekuti ndeyechokwadi muchinjika-chikuva, pasina chikonzero chekutsvaga vatengi papuratifomu yega yega.
dhawunirodha - 993 mbits; upload - 770 mbits
SSH mugero
Pamwe chete simbe hadzina kunyora nezvekushandisa SSH senzira yekushandisa. Imwe yezvisina kunaka ndeye "crutch" yemhinduro, i.e. kuitumira kubva kumutengi ari nyore, akanaka papuratifomu yese haishande. Zvakanakira kuita kwakanaka, hapana chikonzero chekuisa chero chinhu pane server zvachose.
dhawunirodha - 1270 mbits; upload - 1140 mbits
OpenVPN
OpenVPN yakaedzwa mumamodhi mana anoshanda: tcp, tcp+sslh, tcp+stunnel, udp.
OpenVPN maseva akagadziridzwa otomatiki nekuisa streisand.
Nezvesezvinogoneka munhu kutonga, panguva ino chete stunnel modhi inopesana nemaDPI epamberi. Chikonzero chekuwedzera kusingawanzoitiki kwekufambisa paunenge uchiputira kuvhurikaVPN-tcp mu stunnel haisi pachena kwandiri, cheki yakaitwa mumhanyi akati wandei, panguva dzakasiyana uye nemazuva akasiyana, mhedzisiro yaive yakafanana. Zvichida izvi zvinokonzerwa netiweki stack marongero akaiswa paunenge uchiendesa Streisand, nyora kana uine chero mazano kuti nei zvakadaro.
openvpntcp: dhawunirodha - 760 mbits; upload - 659 mbits
openvpntcp+sslh: dhawunirodha - 794 mbits; upload - 693 mbits
openvpntcp+stunnel: dhawunirodha - 619 mbits; upload - 943 mbits
openvpnudp: dhawunirodha - 756 mbits; upload - 580 mbits
Openconnect
Haisi iyo inonyanya kufarirwa chishandiso chekupfuura blockages, inosanganisirwa muStreisand package, saka isu takafunga kuiyedza futi.
dhawunirodha - 895 mbits; kurodha 715 mbps
wire guard
Chishandiso che hype chinozivikanwa pakati pevashandisi vekuMadokero, vagadziri veprotocol vakatogamuchira mamwe ma grants ekusimudzira kubva kumari yekudzivirira. Inoshanda seLinux kernel module kuburikidza neUDP. Munguva pfupi yapfuura, vatengi vewindows vakaonekwa.
Yakaumbwa nemusiki senzira yakapusa, yekukurumidza yekuona Netflix usiri mumatunhu.
Saka zvakanakira nezvayakaipira. Pros: inokurumidza kwazvo protocol, hukama huri nyore hwekuisa uye kugadzirisa. Zvakaipa - mugadziri haana kutanga aigadzira aine chinangwa chekupfuura zvakakomba blockages, uye saka wargard inoonekwa zviri nyore nezvishandiso zviri nyore, zvinosanganisira. wireshark.
wireguard protocol mu wireshark
dhawunirodha - 1681 mbits; kurodha 1638 mbps
Sezvineiwo, iyo warguard protocol inoshandiswa mune yechitatu-bato tunsafe mutengi, iyo, kana ikashandiswa neiyo yakafanana warguard server, inopa zvakanyanya kuipa mhedzisiro. Zvingangoita kuti mutengi weWindows wargard aratidze mhedzisiro imwe chete:
tunsafeclient: dhawunirodha - 1007 mbits; upload - 1366 mbits
OutlineVPN
Outline kuita kweshadowox server uye mutengi ine yakanaka uye yakareruka mushandisi interface kubva kuGoogle jigsaw. MuWindows, mutengi wemutengi anongori seti yemaputi eiyo shadowsocks-yemunharaunda (shadowsocks-libev mutengi) uye badvpn (tun2socks binary inotungamira yese muchina traffic kune yemuno socks proxy) mabhinari.
Shadowsox yakambopokana neGreat Firewall yeChina, asi zvichibva paongororo yazvino, izvi hazvisisiri izvo. Kusiyana neShadowSox, kunze kwebhokisi haitsigire kubatanidza obfuscation kuburikidza nemapulagi, asi izvi zvinogona kuitwa nemaoko nekubata neserver uye mutengi.
dhawunirodha - 939 mbits; upload - 930 mbits
ShadowsocksR
ShadowsocksR iforogo yepakutanga Shadowsocks, yakanyorwa muPython. Muchidimbu, ibhokisi remumvuri umo nzira dzakati wandei dzetraffic obfuscation dzakarovererwa zvakasimba.
Kune maforogo e ssR kune libev uye chimwe chinhu. Iyo yakaderera throughput pamwe nekuda kwemutauro wekodhi. Iyo yekutanga shadowsox papython haina kukurumidza kukurumidza.
shadowsocksR: dhawunirodha 582 mbits; upload 541 mbits.
Shadowsocks
Chishandiso cheChinese block bypass chinomisikidza traffic uye chinokanganisa otomatiki kuongorora mune dzimwe nzira dzinoshamisa. Kusvika nguva pfupi yadarika, GFW haina kuvharwa; ivo vanoti ikozvino yakavharwa chete kana iyo UDP relay yakavhurwa.
Muchinjikwa-chikuva (kune vatengi kune chero chikuva), inotsigira kushanda nePT yakafanana neyeThor's obfuscators, kune akati wandei ayo kana akachinjirwa kwairi obfuscators, nekukurumidza.
Kune boka rekushandisa kwe shadowox vatengi uye maseva, mumitauro yakasiyana. Mukuedza, shadowsocks-libev yakaita sevhavha, vatengi vakasiyana. Iyo inomhanyisa Linux mutengi yakave shadowsocks2 pakuenda, yakagoverwa semutengi akasarudzika mu streisand, ini handigone kutaura kuti yakawanda sei inobereka shadowsocks-mahwindo. Mune mimwe miedzo yakawanda, shadowsocks2 yakashandiswa semutengi. Screenshots yekuyedza yakachena shadowsocks-libev haina kugadzirwa nekuda kwekukasira kuri pachena kwekuitwa uku.
shadowsocks2: dhawunirodha - 1876 mbits; upload - 1981 mbits.
shadowsocks-rust: download - 1605 mbits; upload - 1895 mbits.
Shadowsocks-libev: download - 1584 mbits; upload - 1265 mbits.
Simple-obfs
Iyo plugin ye shadowsox ikozvino iri mu "depreciated" chimiro asi ichiri kushanda (kunyangwe isiri nguva dzose zvakanaka). Yakanyanya kutsiviwa neiyo v2ray-plugin. Inoshatisa traffic kungave iri pasi peHTTP websocket (uye inokubvumidza kuti ushatise musoro wekuenda, uchiita kunge hausi kuzoona pornhub, asi, semuenzaniso, webhusaiti yeBumbiro reRussia Federation) kana pasi pepseudo-tls (pseudo). , nekuti haishandise chero zvitupa, iyo yakapfava DPI yakadai seyemahara nDPI inoonekwa se "tls no cert." Mune tls modhi, hazvichagoneke kubira misoro).
Nekukurumidza, yakaiswa kubva ku repo nemurairo mumwe, yakagadziridzwa zviri nyore, ine yakavakirwa-mukati failover basa (apo traffic kubva kune isiri-nyore-obfs mutengi ikauya kuchiteshi iyo nyore-obfs inoteerera, inoendesa kune kero. kwaunotsanangura muzvirongwa - seizvi Nenzira iyi, unogona kudzivisa kutarisa kwebhuku rechiteshi 80, semuenzaniso, nekungotungamira kune webhusaiti ine http, pamwe nekuvhara kuburikidza nekubatanidza probes).
shadowsockss-obfs-tls: download - 1618 mbits; upload 1971 mbits.
shadowsockss-obfs-http: download - 1582 mbits; upload - 1965 mbits.
Yakareruka-obfs muHTTP modhi inogona zvakare kushanda kuburikidza neCDN reverse proxy (semuenzaniso, cloudflare), saka kune mupi wedu traffic ichaita seHTTP-plaintext traffic kune cloudflare, izvi zvinotibvumira kuvanza mugero wedu zvishoma zvirinani, uye pa panguva imwecheteyo patsanura nzvimbo yekupinda uye yekubuda kwetraffic - mupi anoona kuti traffic yako iri kuenda kuCDN IP kero, uye zvinonyanya kufarira pamifananidzo zvinoiswa panguva ino kubva kuVPS IP kero. Zvinofanira kutaurwa kuti s-obfs kuburikidza neCF inoshanda zvisina tsarukano, nguva nenguva isingavhure zvimwe zviwanikwa zveHTTP, semuenzaniso. Saka, zvaisaita kuti uedze kurodha uchishandisa iperf kuburikidza ne shadowsockss-obfs + CF, asi tichitarisa nemhedzisiro yekumhanyisa bvunzo, iyo throughput iri pamwero we shadowsocksv2ray-plugin-tls+CF. Ini handisi kubatanidza zvidzitiro kubva ku iperf3, nekuti... Haufanire kuvimba navo.
kudhawunirodha (speedtest) - 887; kurodha (kumhanyisa) - 1154.
Dhaunirodha (iperf3) - 1625; upload (iperf3) - NA.
v2ray-plugin
V2ray-plugin yakatsiva maobfs akareruka seyakanyanya "official" obfuscator ye ss libs. Kusiyana neakareruka obfs, haisati yave mumatura, uye iwe unofanirwa kudhawunirodha pre-yakaunganidzwa bhinari kana kuiunganidza iwe pachako.
Inotsigira matatu ekushandisa modes: default, HTTP websocket (ine rutsigiro rwe spoofing misoro yekwainoenda host); tls-websocket (kusiyana ne-s-obfs, iyi yakazara yakazara tls traffic, iyo inozivikanwa nechero reverse proxy web server uye, semuenzaniso, inobvumidza iwe kugadzirisa tls kumisa pane cloudfler maseva kana munginx); quic - inoshanda kuburikidza ne udp, asi zvinosuruvarisa kuti kuita kwequic mu v3rey kwakadzikira.
Pakati pezvakanakira zvichienzaniswa neakareruka obfs: iyo v2rey plugin inoshanda pasina matambudziko kuburikidza neCF muHTTP-websocket modhi ine chero traffic, muTLS modhi yakazara-yakazara TLS traffic, inoda zvitupa zvekushanda (semuenzaniso, kubva kuLet encrypt kana isu pachedu. -saina).
shadowsocksv2ray-plugin-http: kurodha - 1404 mbits; upload 1938 mbits.
shadowsocksv2ray-plugin-tls: dhawunirodha - 1214 mbits; upload 1898 mbits.
shadowsocksv2ray-plugin-quic: download - 183 mbits; upload 384 mbits.
Sezvandambotaura, v2ray inogona kuseta misoro, uye nekudaro unogona kushanda nayo kuburikidza nereverse proxy CDN (cloudfler semuenzaniso). Kune rimwe divi, izvi zvinoomesa kuona kwemugero, kune rumwe rutivi, inogona kuwedzera zvishoma (uye dzimwe nguva kuderedza) iyo lag - zvese zvinoenderana nenzvimbo yako nemaseva. CF parizvino iri kuyedza kushanda nequic, asi iyi modhi haisati yavepo (kungoita emaakaundi emahara).
shadowsocksv2ray-plugin-http+CF: download - 1284 mbits; upload 1785 mbits.
shadowsocksv2ray-plugin-tls+CF: dhawunirodha - 1261 mbits; upload 1881 mbits.
Cloak
Iyo shred ndiyo mhedzisiro yekumwe kusimudzira kweGoQuiet obfuscator. Inoteedzera TLS traffic uye inoshanda kuburikidza neTCP. Parizvino, munyori akaburitsa yechipiri vhezheni yeplugin, jasi-2, iro rakasiyana zvakanyanya nejasi rekutanga.
Sekureva kwemugadziri, vhezheni yekutanga yeplugin yakashandisa iyo tls 1.2 tangazve sesheni maitiro kukanganisa kero yekuenda yetls. Mushure mekuburitswa kweiyo vhezheni itsva (wachi-2), ese mapeji ewiki paGithub anotsanangura mashandisirwo aya akabviswa; hapana kutaurwa kweizvi mune tsananguro yazvino yeobfuscation encryption. Zvinoenderana nerondedzero yemunyori, yekutanga vhezheni yeshred haishandiswe nekuda kwekuvapo kwe "kukanganisa kwakanyanya mu crypto." Panguva yekuedzwa, kwaingova neshanduro yekutanga yejasi, mabhinari ayo achiri paGithub, uye kunze kwezvimwe zvese, kusasimba kwakanyanya hakuna kukosha, nekuti. shadowsox encrypts traffic nenzira imwechete senge isina jasi, uye iyo cloac haina mhedzisiro pane shadowsox's crypto.
shadowsockscloak: download - 1533; upload - 1970 mbits
Kcptun
inoshandisa kcptun sekutakura uye mune zvimwe zviitiko zvakakosha zvinobvumira kuwana yakawedzera throughput. Nehurombo (kana rombo rakanaka), izvi zvinonyanya kukosha kune vashandisi vanobva kuChina, vamwe vane nharembozha vanobata zvakanyanya TCP uye havabate UDP.
Kcptun ine nzara yesimba, uye inotakura zviri nyore 100 zion cores pa4% kana yakaedzwa nemutengi mumwe. Mukuwedzera, iyo plugin "inononoka", uye kana uchishanda kuburikidza ne iperf1 haina kupedza miedzo kusvika kumagumo. Ngatitarisei kumhanyisa bvunzo mubrowser.
shadowsockskcptun: download (speedtest) - 546 mbits; upload (speedtest) 854 mbits.
mhedziso
Iwe unoda iri nyore, inokurumidza VPN kumisa traffic kubva kumushini wako wese? Ipapo sarudzo yako ndeye warguard. Iwe unoda proxies (yekusarudza tunneling kana kupatsanurwa kwemunhu chaiye anoyerera) kana zvakanyanya kukosha kwauri kuti uvhare traffic kubva mukuvharira kwakakomba? Wobva watarisa shadowbox ine tlshttp obfuscation. Iwe unoda kuve nechokwadi chekuti Internet yako ichashanda chero bedzi Internet ichishanda zvachose? Sarudza kune proxy traffic kuburikidza neakakosha maCDN, ichivharira izvo zvinozotungamira mukukundikana kwehafu yeInternet munyika.
Pivot tafura, yakarongedzwa nekudhawunirodha
Source: www.habr.com