{"id":53774,"date":"2019-12-10T00:00:00","date_gmt":"2019-12-09T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/sravnenie-proizvoditelnosti-instrumentov-obhoda-blokirovok-vpn"},"modified":"2020-02-18T14:01:42","modified_gmt":"2020-02-18T11:01:42","slug":"sravnenie-proizvoditelnosti-instrumentov-obhoda-blokirovok-vpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sravnenie-proizvoditelnosti-instrumentov-obhoda-blokirovok-vpn","title":{"rendered":"Krahasimi i performanc\u00ebs s\u00eb mjeteve p\u00ebr anashkalimin e bllokimeve VPN","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nd\u00ebrsa vazhdon t\u00eb na mbyllen qasjet n\u00eb burime t\u00eb ndryshme n\u00eb internet, b\u00ebhet gjithnj\u00eb e m\u00eb e r\u00ebnd\u00ebsishme \u00e7\u00ebshtja e kalimit t\u00eb bllokimeve dhe k\u00ebshtu b\u00ebhet gjithnj\u00eb e m\u00eb e r\u00ebnd\u00ebsishme pyetja \"Si t\u00eb kalojm\u00eb bllokimet m\u00eb shpejt?\".<\/p>\n

T\u00eb l\u00ebm\u00eb tem\u00ebn e efikasitetit, n\u00eb lidhje me kalimin e DPI white-list dhe black-list p\u00ebr nj\u00eb rast tjet\u00ebr, dhe thjesht t\u00eb krahasojm\u00eb performanc\u00ebn e mjeteve t\u00eb njohura p\u00ebr kalimin e bllokimeve.<\/p>\n

Kujdes: N\u00eb k\u00ebt\u00eb artikull n\u00ebn spojler do t\u00eb ket\u00eb shum\u00eb imazhe.
\n<\/a><\/noindex>
\nSh\u00ebnim: ky artikull krahason performanc\u00ebn e zgjidhjeve t\u00eb njohura VPN dhe proxy, n\u00eb kushte t\u00eb ngjashme me ato \"ideale\". Rezultatet e marra dhe t\u00eb p\u00ebrshkruara k\u00ebtu, nuk jan\u00eb domosdoshm\u00ebrisht t\u00eb nj\u00ebjta me rezultatet e tua n\u00eb terren. Sepse numri n\u00eb speed test shpesh varet jo nga sa produktiv \u00ebsht\u00eb mjeti i kalimit, por nga si e kufizon ose bllokon ofruesi yt.<\/p>\n

Metodologjia<\/h3>\n

\nTek ofruesi n\u00eb cloud (DO) jan\u00eb bler\u00eb 3 VPS n\u00eb vende t\u00eb ndryshme t\u00eb bot\u00ebs. 2 n\u00eb Holand\u00eb, 1 n\u00eb Gjermani. U zgjodh VPS m\u00eb produktiv (p\u00ebr numrin e b\u00ebrthamave) nga ato t\u00eb disponueshme p\u00ebr llogarin\u00eb n\u00eb ofert\u00ebn p\u00ebr kreditet e kuponit. <\/p>\n

N\u00eb serverin e par\u00eb holandez \u00ebsht\u00eb vendosur nj\u00eb server privat iperf3. <\/p>\n

N\u00eb serverin e dyt\u00eb holandez ruhen nj\u00eb pas nj\u00eb serverat e mjeteve p\u00ebr kalimin e bllokimeve. <\/p>\n

N\u00eb VPS-n\u00eb gjermane \u00ebsht\u00eb vendosur nj\u00eb imazh desktop Linux (xubuntu) me VNC dhe nj\u00eb ambient virtual t\u00eb pun\u00ebs. Ky VPS \u00ebsht\u00eb nj\u00eb klient p\u00ebrkushtuar, dhe n\u00eb t\u00eb instalohet dhe ekzekutohet nj\u00eb p\u00ebr nj\u00eb klient\u00eb proxy VPN. <\/p>\n

Marrjet e shpejt\u00ebsis\u00eb kryhen nga tre her\u00eb, jemi t\u00eb orientuar n\u00eb mesataren, p\u00ebrdorim 3 mjete: n\u00eb Chromium p\u00ebrmes web-speedtest; n\u00eb Chromium p\u00ebrmes fast.com; nga konsola p\u00ebrmes iperf3 p\u00ebrmes proxy chains (aty ku duhet t\u00eb fusim trafikun e iperf3 n\u00eb proxy). <\/p>\n

Nj\u00eb lidhje e drejtp\u00ebrdrejt\u00eb \"klient\"-server iperf3 jep shpejt\u00ebsi 2 Gbit\/s n\u00eb iperf3, dhe pak m\u00eb pak n\u00eb fast speed test.<\/p>\n

Lexuesi i kurioz do t\u00eb pyes\u00eb, \"pse nuk e zgjodhe speedtest-cli?\" dhe do t\u00eb ket\u00eb t\u00eb drejt\u00eb. <\/p>\n

Testi i shpejt\u00ebsis\u00eb doli t\u00eb ishte nj\u00eb metod\u00eb e paq\u00ebndrueshme dhe t\u00eb paarsyeshme p\u00ebr t\u00eb matur kapacitetin e bandwidth-it, p\u00ebr arsye q\u00eb nuk i di. Tre matje radhazi mund t\u00eb jepnin rezultate t\u00eb ndryshme ose, p\u00ebr shembull, t\u00eb tregonin nj\u00eb kapacitet shum\u00eb m\u00eb t\u00eb lart\u00eb sesa shpejt\u00ebsia e porteve n\u00eb VPS-in tim. Ndoshta problemi q\u00ebndron n\u00eb paaft\u00ebsin\u00eb time, por duke p\u00ebrdorur k\u00ebtij instrumenti nuk m\u00eb dukej e mundur t\u00eb kryej k\u00ebrkime.<\/p>\n

Sa i p\u00ebrket rezultateve nga tre metodat e matjes (speedtestfastiperf), mendoj se treguesit e iperf jan\u00eb m\u00eb t\u00eb sakt\u00eb, t\u00eb q\u00ebndruesh\u00ebm dhe t\u00eb besuesh\u00ebm, nd\u00ebrsa speedtestfast jan\u00eb p\u00ebr udh\u00ebzime. Por disa mjete bypass-i nuk lejuan p\u00ebrfundimin e 3 matjeve p\u00ebrmes iperf3 dhe n\u00eb k\u00ebto raste, mund t\u00eb orientohesh n\u00eb speedtestfast.<\/p>\n

Testi i shpejt\u00ebsis\u00eb jep rezultate t\u00eb ndryshme<\/b>\"Krahasimi
\n<\/p>\n

Mjetet<\/h3>\n

\nU testuan gjithsej 24 mjete t\u00eb ndryshme bypass-i ose kombinime t\u00eb tyre; p\u00ebr secilin prej tyre do t\u00eb jap nj\u00eb shpjegim t\u00eb vog\u00ebl dhe p\u00ebrshtypjet e mia nga puna me ta. Por n\u00eb thelb, q\u00ebllimi ishte t\u00eb krahasohej shpejt\u00ebsia e shadowsocks (dhe shum\u00eb obfuscator\u00eb t\u00eb ndrysh\u00ebm me t\u00eb) openVPN dhe wireguard.<\/p>\n

N\u00eb k\u00ebt\u00eb material un\u00eb nuk do t\u00eb prek detalisht pyetjen 'si t\u00eb fsheh\u00ebsh m\u00eb mir\u00eb trafikun p\u00ebr t\u00eb mos u bllokuar', sepse anashkalimi i bllokimeve \u00ebsht\u00eb nj\u00eb mas\u00eb reaktive \u2014 ne p\u00ebrputhim veten me at\u00eb q\u00eb p\u00ebrdor censori dhe veprojm\u00eb sipas k\u00ebsaj.<\/p>\n

Rezultatet<\/h3>\n

<\/p>\n

Strongswanipsec<\/h4>\n

\nNga p\u00ebrshtypjet e mia \u2014 \u00ebsht\u00eb shum\u00eb e leht\u00eb p\u00ebr t'u konfiguruar, punon mjaft stabilisht. Nga pluset \u2014 \u00ebsht\u00eb me t\u00eb v\u00ebrtet\u00eb nd\u00ebrplatform\u00eb, pa nevoj\u00ebn p\u00ebr t\u00eb k\u00ebrkuar klient\u00eb p\u00ebr \u00e7do platform\u00eb.<\/p>\n

shkarkoni \u2014 993 mbits; ngarkoni \u2014 770 mbits<\/b>\"Krahasimi
\n<\/p>\n

SSH-tuneli<\/h4>\n

\nP\u00ebr p\u00ebrdorimin e SSH si nj\u00eb instrument tuneli nuk ka shkruajtur ndoshta vet\u00ebm ai q\u00eb \u00ebsht\u00eb leniv. Nga minuset \u2014 'paligjshm\u00ebria' e zgjidhjes, pra, nuk do ta b\u00ebni t\u00eb pal\u00ebvizshme nga nj\u00eb klient i rehatsh\u00ebm dhe t\u00eb bukur n\u00eb \u00e7do platform\u00eb. Nga pluset \u2014 performanc\u00eb e mir\u00eb, nuk ka nevoj\u00eb p\u00ebr t\u00eb instaluar ndonj\u00eb gj\u00eb n\u00eb server.<\/p>\n

shkarkoni \u2014 1270 mbits; ngarkoni \u2014 1140 mbits<\/b>\"Krahasimi<\/p>\n

OpenVPN<\/h4>\n

\nOpenVPN u testua n\u00eb 4 modet e funksionimit: tcp, tcp+sslh, tcp+stunnel, udp.<\/p>\n

Server\u00ebt OpenVPN u konfiguruan automatikisht, me instalimin e streisand.<\/p>\n

Deri sa gjykojm\u00eb, n\u00eb k\u00ebt\u00eb moment vet\u00ebm m\u00ebnyra e funksionimit p\u00ebrmes stunnel \u00ebsht\u00eb e q\u00ebndrueshme ndaj DPI-ve t\u00eb avancuara. Arsyeja p\u00ebr rritjen anormale t\u00eb kapacitetit t\u00eb kalimit me paketimin e openVPN-tcp n\u00eb stunnel nuk \u00ebsht\u00eb e qart\u00eb p\u00ebr mua, testimet u b\u00ebn\u00eb n\u00eb disa koh\u00eb dhe n\u00eb dit\u00eb t\u00eb ndryshme, rezultati ishte i nj\u00ebjt\u00eb. Mund t\u00eb jet\u00eb e lidhur me cil\u00ebsimet e grumbullimit t\u00eb rrjetit q\u00eb vendosen gjat\u00eb shp\u00ebrndarjes s\u00eb strejzandit, shkruani n\u00ebse keni ide pse \u00ebsht\u00eb k\u00ebshtu.<\/p>\n

openvpntcp: shkarkoni \u2014 760 mbits; ngarkoni \u2014 659 mbits<\/b>\"Krahasimi
\n
\nopenvpntcp+sslh: shkarkoni \u2014 794 mbits; ngarkoni \u2014 693 mbits<\/b>\"Krahasimi
\n
\nopenvpntcp+stunnel: shkarkoni \u2014 619 mbits; ngarkoni \u2014 943 mbits<\/b>\"Krahasimi
\n
\nopenvpnudp: shkarkoni \u2014 756 mbits; ngarkoni \u2014 580 mbits<\/b>\"Krahasimi
\n<\/p>\n

Openconnect<\/h4>\n

\nNuk \u00ebsht\u00eb mjeti m\u00eb popullor p\u00ebr t\u00eb anashkaluar bllokimet, \u00ebsht\u00eb pjes\u00eb e paket\u00ebs strejzand, k\u00ebshtu q\u00eb vendos\u00ebm ta testojm\u00eb edhe at\u00eb.<\/p>\n

shkarkoni \u2014 895 mbits; ngarkoni 715 mbits<\/b>\"Krahasimi
\n<\/p>\n

Wireguard<\/h4>\n

\nNj\u00eb mjet me hype, i njohur nga p\u00ebrdoruesit per\u00ebndimor\u00eb, zhvilluesit e protokollit madje mor\u00ebn disa grant\u00eb p\u00ebr zhvillim nga fondet mbrojt\u00ebse. Punon si modul i b\u00ebrtham\u00ebs Linux, p\u00ebrmes UDP. S\u00eb fundmi, jan\u00eb shfaqur klient\u00eb p\u00ebr windowsios.<\/p>\n

I menduar nga krijuesi si nj\u00eb m\u00ebnyr\u00eb e thjesht\u00eb dhe e shpejt\u00eb p\u00ebr t\u00eb par\u00eb Netflix duke qen\u00eb jasht\u00eb Shteteve t\u00eb Bashkuara. <\/p>\n

Prandaj, pluset dhe minuset. Pluses \u2014 protokoll shum\u00eb i shpejt\u00eb, relativisht leht\u00eb p\u00ebr t'u instaluar\/cil\u00ebsuar. Minus \u2014 zhvilluesi fillimisht nuk e krijoi p\u00ebr q\u00ebllimin e anashkalimit t\u00eb bllokimeve serioze, dhe p\u00ebr k\u00ebt\u00eb arsye, vaergard leht\u00ebsisht zbulohet nga mjetet m\u00eb t\u00eb thjeshta, duke p\u00ebrfshir\u00eb wireshark.<\/p>\n

protokolli wireguard n\u00eb wireshark<\/b>\"Krahasimi
\nshkarkoni \u2014 1681 mbits; ngarkoni 1638 mbits<\/b>\"Krahasimi
\n
\nAjo q\u00eb \u00ebsht\u00eb interesante, protokolli vaergard p\u00ebrdoret n\u00eb klientin e jasht\u00ebm tunsafe, i cili, kur p\u00ebrdoret me t\u00eb nj\u00ebjtin server vaergard, jep rezultate shum\u00eb m\u00eb t\u00eb k\u00ebqija. Ka shum\u00eb mund\u00ebsi q\u00eb edhe klienti p\u00ebr windows i vaergard do t\u00eb tregoj\u00eb rezultate t\u00eb ngjashme:<\/p>\n

tunsafeclient: shkarkoni \u2014 1007 mbits; ngarkoni \u2014 1366 mbits<\/b>\"Krahasimi
\n<\/p>\n

OutlineVPN<\/h4>\n

\nAoutlajn \u00ebsht\u00eb nj\u00eb implementim i serverit dhe klientit shadowsocks me nj\u00eb GUI t\u00eb bukur dhe t\u00eb leht\u00eb p\u00ebr t'u p\u00ebrdorur nga jigsaw i Google. N\u00eb Windows, klienti aoutlajn p\u00ebrb\u00ebhet thjesht nga nj\u00eb grup mb\u00ebshtjell\u00ebsish p\u00ebr binar\u00ebt shadowsocks-local (klienti shadowsocks-libev) dhe badvpn (binar tun2socks, q\u00eb drejton t\u00eb gjith\u00eb trafikun e makin\u00ebs n\u00eb nj\u00eb SOCKS-proksy lokal).<\/p>\n

Dikur, Shadowsocks ishte rezistent ndaj murit t\u00eb madh t\u00eb Kin\u00ebs, por sipas komenteve t\u00eb fundit, tani kjo nuk \u00ebsht\u00eb m\u00eb e v\u00ebrtet\u00eb. Ndryshe nga Shadowsocks, \"nga kutia\" nuk mb\u00ebshtet lidhjen e obfuscimit n\u00ebp\u00ebrmjet plugin-eve, por mund t\u00eb realizohet manualisht duke luajtur me serverin dhe klientin.<\/p>\n

shkarkoni \u2014 939 mbits; ngarkoni \u2014 930 mbits<\/b>\"Krahasimi
\n<\/p>\n

ShadowsocksR<\/h4>\n

\nShadowsocksR \u00ebsht\u00eb nj\u00eb fork i origjinalit Shadowsocks, i shkruar n\u00eb Python. N\u00eb thelb, p\u00ebrfaq\u00ebson Shadowsocks me disa metoda t\u00eb ngjitura t\u00eb obfuscimit t\u00eb trafikut. <\/p>\n

Ekzistojn\u00eb forks t\u00eb ssR n\u00eb libev dhe di\u00e7ka tjet\u00ebr. Kapaciteti i ul\u00ebt i kalimit mund t\u00eb jet\u00eb i shkaktuar nga gjuha e kodit. Origjinali Shadowsocks n\u00eb Python nuk \u00ebsht\u00eb ndjesh\u00ebm m\u00eb i shpejt\u00eb.<\/p>\n

shadowsocksR: shkarkim 582 mbits; ngarkim 541 mbits.<\/b>\"Krahasimi
\n<\/p>\n

Shadowsocks<\/h4>\n

\nNj\u00eb mjet kinez p\u00ebr t\u00eb anashkaluar bllokimet, q\u00eb randomizon trafikun dhe me metoda t\u00eb tjera t\u00eb mrekullueshme pengon analiz\u00ebn automatike. Deri p\u00ebrpara pak koh\u00ebsh nuk u bllokua nga GFW, tani thuhet se bllokohet vet\u00ebm n\u00ebse aktivizoni UDP-relay. <\/p>\n

Kryq-platform\u00eb (ka klient\u00eb p\u00ebr \u00e7do platform\u00eb), mb\u00ebshtet pun\u00ebn me PT si obfuscator\u00ebt e Tor, ka disa obfuscator\u00eb t\u00eb tij ose t\u00eb adaptuar, t\u00eb shpejt\u00eb.<\/p>\n

Ka shum\u00eb implikime t\u00eb klient\u00ebve dhe server\u00ebve Shadowsocks n\u00eb gjuh\u00eb t\u00eb ndryshme. N\u00eb testim si server p\u00ebrdorej shadowsocks-libev, klient\u00ebt ishin t\u00eb ndrysh\u00ebm. Klienti m\u00eb i shpejt\u00eb Linux rezultoi t\u00eb ishte shadowsocks2 n\u00eb Go, i shp\u00ebrndar\u00eb si klienti default n\u00eb Streisand, nuk mund t\u00eb them sa m\u00eb i p\u00ebrparuar \u00ebsht\u00eb shadowsocks-windows. N\u00eb shumic\u00ebn e testeve t\u00eb m\u00ebvonshme si klient p\u00ebrdorej shadowsocks2. Pasqyra me testimin e shadowsocks-libev nuk u nd\u00ebrtuan, p\u00ebr shkak t\u00eb mbeturis\u00eb s\u00eb dukshme t\u00eb k\u00ebsaj realizimi.<\/p>\n

shadowsocks2: shkarkoni \u2014 1876 mbits; ngarkoni \u2014 1981 mbits.<\/b>\"Krahasimi
\n
\nshadowsocks-rust: shkarkoni \u2014 1605 mbits; ngarkoni \u2014 1895 mbits.<\/b>\"Krahasimi
\n
\nShadowsocks-libev: shkarkim \u2014 1584 mbits; ngarkim \u2014 1265 mbits.<\/i><\/p>\n

Simple-obfs<\/h4>\n

\nNj\u00eb plugin p\u00ebr Shadowsocks, tani n\u00eb statusin \u201cdepreciated\u201d por akoma funksionon (ndon\u00ebse jo gjithmon\u00eb mir\u00eb). Kryesisht \u00ebsht\u00eb z\u00ebvend\u00ebsuar nga plugin v2ray-plugin. Obfuscates trafikun ndoshta si n\u00eb http-websocket (dhe lejon spufimin e headereve t\u00eb hostit t\u00eb destinuar, duke b\u00ebr\u00eb sikur po shikon nj\u00eb faqe si konstitucioni i RF-s\u00eb) ose si pseudo-tls (pseudo, sepse nuk p\u00ebrdor asnj\u00eb certifikat, DPI m\u00eb t\u00eb thjesht\u00eb si nDPI e zbulojn\u00eb si \u201ctls no cert\u201d. N\u00eb modin tls, spufimi i headereve nuk \u00ebsht\u00eb m\u00eb i mundur). <\/p>\n

Mjaft i shpejt\u00eb, instalohet nga repi me nj\u00eb komand\u00eb, konfigurimi \u00ebsht\u00eb shum\u00eb i thjesht\u00eb, ka nj\u00eb funksion t\u00eb nd\u00ebrlidhjes t\u00eb nd\u00ebrtuar (kur n\u00eb portin q\u00eb d\u00ebgjon simple-obfs vjen trafiku nga nj\u00eb klient jo-simple-obfs, ai e p\u00ebrcjell n\u00eb adres\u00ebn q\u00eb do t\u00eb tregoni n\u00eb konfigurim \u2013 k\u00ebshtu mund t\u00eb shmangni verifikimin manual t\u00eb portit 80, p\u00ebr shembull, thjesht duke b\u00ebr\u00eb nj\u00eb redirect n\u00eb nj\u00eb faqe interneti me http, si dhe bllokimet p\u00ebrmes connection-probes).<\/p>\n

shadowsockss-obfs-tls: shkarkoni \u2014 1618 mbits; ngarkoni 1971 mbits.<\/b>\"Krahasimi
\n
\nshadowsockss-obfs-http: shkarkoni \u2014 1582 mbits; ngarkoni \u2014 1965 mbits.<\/b>\"Krahasimi
\n
\nSimple-obfs n\u00eb modalitetin http gjithashtu mund t\u00eb funksionoj\u00eb p\u00ebrmes CDN reverse-proxy (si\u00e7 \u00ebsht\u00eb cloudflare), k\u00ebshtu q\u00eb p\u00ebr ofruesin ton\u00eb, trafiku do t\u00eb duket si trafiku http-plain text deri n\u00eb cloudflare, kjo lejon t\u00eb fshihet m\u00eb mir\u00eb tuneli yn\u00eb, dhe nj\u00ebkoh\u00ebsisht ndan pik\u00ebn e hyrjes dhe daljes s\u00eb trafikut \u2013 ofruesi sheh se trafiku juaj shkon drejt CDN, nd\u00ebrsa like-t e ekstremist\u00ebve n\u00eb imazhe vendosen n\u00eb k\u00ebt\u00eb moment nga adresa ip e VPS-s\u00eb. Duhet th\u00ebn\u00eb se s-obfs p\u00ebrmes CF funksionon ndryshe, her\u00eb pas here duke mos hapur disa burime http, p\u00ebr shembull. Pra, testimi i ngarkeses duke p\u00ebrdorur iperf p\u00ebrmes shadowsockss-obfs+CF nuk ka mundur t\u00eb realizohet, por sipas rezultateve t\u00eb testeve t\u00eb shpejt\u00ebsis\u00eb, kapaciteti i kalimit \u00ebsht\u00eb n\u00eb nivelin e shadowsocksv2ray-plugin-tls+CF. Nuk po paraqes skrin t\u00eb iperf3, pasi ato nuk duhet t\u00eb b\u00ebhen referenc\u00eb. ip-adresa<\/a> shkarkimi (speedtest) \u2014 887; ngarkimi (speedtest) \u2014 1154.<\/p>\n

shkarkoni (speedtest) \u2014 887; ngarkoni (speedtest) \u2014 1154.<\/b>\"Krahasimi
\n
\nv2ray-plugin<\/i><\/p>\n

V2ray-plugin ka ardhur n\u00eb vend t\u00eb simple-obfs si obfuscator i pari \u201czyrtar\u201d p\u00ebr ss-libev. Ndryshe nga simple-obfs, aktualisht nuk \u00ebsht\u00eb n\u00eb repozitor\u00ebt, dhe duhet t\u00eb shkarkohet nj\u00eb binar i grumbulluar m\u00eb par\u00eb, ose t\u00eb kompiloni vet\u00eb.<\/h4>\n

\nMb\u00ebshtet 3 modulet e funksionimit: defolt, http-websocket (me mb\u00ebshtetje p\u00ebr spoofing t\u00eb headers t\u00eb destinacionit); tls-websocket (ndryshe nga s-obfs, ky \u00ebsht\u00eb nj\u00eb trafik i plot\u00eb tls, i cili njihet nga \u00e7do server web-reverseproxy dhe p\u00ebr shembull lejon t\u00eb konfigurohet terminimi i tls n\u00eb serverat e cloudflare ose n\u00eb nginx); quic - punon p\u00ebrmes udp, por fatkeq\u00ebsisht performanca e quic n\u00eb v2ray \u00ebsht\u00eb shum\u00eb e ul\u00ebt.<\/p>\n

Nga avantazhet n\u00eb krahasim me simple-obfs: v2ray-plugin funkcionalisht punon pa probleme p\u00ebrmes CF n\u00eb modalitetin http-websocket me \u00e7do trafik, n\u00eb modalitetin tls paraqet nj\u00eb trafik t\u00eb plot\u00eb tls, k\u00ebrkon certifikata p\u00ebr funksionim (p\u00ebr shembull nga let\u2019s encrypt ose t\u00eb vet\u00eb-n\u00ebnshkruara).<\/p>\n

Nga p\u00ebrpar\u00ebsit\u00eb n\u00eb krahasim me simple-obfs: v2ray-plugin punon pa probleme n\u00eb modalitetin http-websocket p\u00ebrmes CF me \u00e7do trafik, n\u00eb modalitetin tls paraqet nj\u00eb trafik t\u00eb plot\u00eb tls, ka nevoj\u00eb p\u00ebr certifikata p\u00ebr funksionim (p\u00ebr shembull nga let\u2019s encrypt ose t\u00eb vet\u00eb-n\u00ebnshkruara).<\/p>\n

shadowsocksv2ray-plugin-http: shkarkoni \u2014 1404 mbits; ngarkoni 1938 mbits.<\/b>\"Krahasimi
\n
\nshadowsocksv2ray-plugin-tls: shkarkoni \u2014 1214 mbits; ngarkoni 1898 mbits.<\/b>\"Krahasimi
\n
\nshadowsocksv2ray-plugin-quic: shkarkoni \u2014 183 mbits; ngarkoni 384 mbits.<\/b>\"Krahasimi
\n
\nSi\u00e7 e p\u00ebrmenda m\u00eb par\u00eb, v2ray mund t\u00eb vendos\u00eb headers, dhe k\u00ebshtu mund t\u00eb punoni me t\u00eb p\u00ebrmes rreth-rreth provozierit CDN (p.sh. Cloudflare). Nga nj\u00ebra an\u00eb, kjo e komplikon t\u00eb identifikosh tunelin, nd\u00ebrsa nga ana tjet\u00ebr \u2014 mund t\u00eb rris\u00eb (disa her\u00eb ta ul\u00eb) lagun \u2014 gjith\u00e7ka varet nga pozita juaj dhe server\u00ebt. Aktualisht, CF \u00ebsht\u00eb duke testuar funksionalitetin me quic, por p\u00ebr momentin ky mod \u00ebsht\u00eb i pap\u00ebrfshir\u00eb (t\u00eb pakt\u00ebn p\u00ebr llogarit\u00eb falas).<\/p>\n

shadowsocksv2ray-plugin-http+CF: shkarkoni \u2014 1284 mbits; ngarkoni 1785 mbits.<\/b>\"Krahasimi
\n
\nshadowsocksv2ray-plugin-tls+CF: shkarkoni \u2014 1261 mbits; ngarkoni 1881 mbits.<\/b>\"Krahasimi
\n<\/p>\n

Cloak<\/h4>\n

\nCloak \u00ebsht\u00eb rezultati i zhvillimit t\u00eb m\u00ebtejsh\u00ebm t\u00eb obfuscatorit GoQuiet. Simulon trafik\u00ebt TLS, punon p\u00ebrkat\u00ebsisht p\u00ebrmes TCP. Aktiualisht, autori ka l\u00ebshuar versionin e dyt\u00eb t\u00eb k\u00ebtij plani, cloak-2, i cili dallohet ndjesh\u00ebm nga origjinali. <\/p>\n

Sipas informacionit nga zhvilluesi, versioni i par\u00eb i plugin-it p\u00ebrdorte mekanizmin tls 1.2 resume session p\u00ebr t\u00eb mashtruar adres\u00ebn e destiancionit p\u00ebr tls. Pas l\u00ebshimit t\u00eb versionit t\u00eb ri (cloak-2), t\u00eb gjitha faqet e wiki n\u00eb GitHub q\u00eb p\u00ebrshkruanin k\u00ebt\u00eb mekaniz\u00ebm u fshin\u00eb, dhe n\u00eb p\u00ebrshkrimin aktual t\u00eb enkriptimit-obfuscation, p\u00ebrmendjeje t\u00eb k\u00ebtij mungon. Sipas p\u00ebrshkrimit t\u00eb autorit, versioni i par\u00eb i cloak nuk p\u00ebrdoret p\u00ebr shkak t\u00eb \"dob\u00ebsive kritike n\u00eb kriptografi\". N\u00eb momentin e testimeve, vet\u00ebm versioni i par\u00eb i cloakit ishte n\u00eb dispozicion, binary-t e saj akoma ndodhen n\u00eb GitHub, dhe p\u00ebr m\u00eb tep\u00ebr, dob\u00ebsit\u00eb kritike nuk jan\u00eb shum\u00eb t\u00eb r\u00ebnd\u00ebsishme, pasi shadowsocks gjithashtu e enkripton trafikun ashtu si edhe pa cloak, dhe n\u00eb kriptografin\u00eb e shadowsocks, cloak nuk ka ndonj\u00eb efekt. <\/p>\n

shadowsockscloak: shkarkoni \u2014 1533; ngarkoni \u2014 1970 mbits<\/b>\"Krahasimi
\n<\/p>\n

Kcptun<\/h4>\n

\nkcptun p\u00ebrdor si transportin protokolli KCP<\/a><\/noindex> dhe n\u00eb disa raste t\u00eb ve\u00e7anta lejon t\u00eb arrihet rritje e kapacitetit. Fatkeq\u00ebsisht (apo me fat) kjo \u00ebsht\u00eb ve\u00e7an\u00ebrisht e r\u00ebnd\u00ebsishme p\u00ebr p\u00ebrdoruesit nga Kina, disa nga operator\u00ebt e saj mobil e ndalin fort TCP dhe nuk e prek\u00ebn UDP.<\/p>\n

Kcptun \u00ebsht\u00eb v\u00ebrtet i uritur, dhe leht\u00eb ngarkon n\u00eb 100% 4 b\u00ebrtham\u00eb gjat\u00eb testimit me 1 klient. P\u00ebr m\u00eb tep\u00ebr, plugin-i \u00ebsht\u00eb \"i ngadalt\u00eb\", ashtu si dhe gjat\u00eb pun\u00ebs n\u00eb iperf3 nuk p\u00ebrfundon testet deri n\u00eb fund. Ne orientohemi sipas speedtest-it n\u00eb shfletues.<\/p>\n

shadowsockskcptun: shkarkoni (speedtest) \u2014 546 mbits; ngarkoni (speedtest) 854 mbits.<\/b>\"Krahasimi
\n<\/p>\n

P\u00ebrfundim<\/h3>\n

\nA keni nevoj\u00eb p\u00ebr nj\u00eb VPN t\u00eb thjesht\u00eb dhe t\u00eb shpejt\u00eb p\u00ebr t\u00eb mbuluar trafikun e gjith\u00eb makin\u00ebs? At\u00ebher\u00eb zgjedhja juaj \u00ebsht\u00eb vaergard. A d\u00ebshironi proxy (p\u00ebr t\u00fcnelimin e p\u00ebrzgjedhur ose ndarjen e rrjedhave t\u00eb virtualeve) ose ju intereson m\u00eb shum\u00eb obfuskimi i trafikut nga bllokimet e r\u00ebnda? At\u00ebher\u00eb shikoni sh\u0259douks me obfuskimin tlshttp. A d\u00ebshironi t\u00eb jeni t\u00eb sigurt q\u00eb interneti juaj do t\u00eb punoj\u00eb p\u00ebr sa koh\u00eb q\u00eb interneti n\u00eb t\u00ebr\u00ebsi funksionon? Zgjidhni t\u00eb proksiononi trafikun p\u00ebrmes CDN-ve t\u00eb r\u00ebnd\u00ebsishme, bllokimi i t\u00eb cilave do t\u00eb \u00e7onte n\u00eb \u00e7arje t\u00eb nj\u00eb pjese t\u00eb madhe t\u00eb internetit n\u00eb vend.<\/p>\n

Tabela p\u00ebrmbledh\u00ebse, renditje sipas shkarkimeve<\/b>\"Krahasimi
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e \u043c\u0435\u0440\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0430\u043c \u0432\u0441\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432 \u0441\u0435\u0442\u0438, \u0432\u0441\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0435\u0435 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u0431\u0445\u043e\u0434\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u0432\u0441\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0435\u0435 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u043e\u043f\u0440\u043e\u0441 \u00ab\u0410 \u043a\u0430\u043a \u0436\u0435 \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438?\u00bb. \u041e\u0441\u0442\u0430\u0432\u0438\u043c \u0442\u0435\u043c\u0443 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u043e\u0431\u0445\u043e\u0434\u0430 DPI\u0432\u0430\u0439\u0442\u043b\u0438\u0441\u0442\u043e\u0432\u0431\u043b\u0435\u043a\u043b\u0438\u0441\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u044f, \u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u0441\u0440\u0430\u0432\u043d\u0438\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a. \u0412\u043d\u0438\u043c\u0430\u043d\u0438\u0435: \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0434 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-53774","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Krahasimi i performanc\u00ebs s\u00eb mjeteve p\u00ebr anashkalimin e bllokimeveVPN | ProHoster","description":"Me sa duket, nd\u00ebrsa na mbyllet gjithnj\u00eb e m\u00eb shum\u00eb qasje n\u00eb resurse t\u00eb ndryshme n\u00eb internet, po b\u00ebhet gjithnj\u00eb e m\u00eb e r\u00ebnd\u00ebsishme pyetja e anashkalimit t\u00eb bllokimeve, dhe k\u00ebshtu po b\u00ebhet gjithnj\u00eb e m\u00eb e r\u00ebnd\u00ebsishme pyetja 'Si t\u00eb anashkalojm\u00eb m\u00eb shpejt?'","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sravnenie-proizvoditelnosti-instrumentov-obhoda-blokirovok-vpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043aVPN | ProHoster","og:description":"\u041f\u043e \u043c\u0435\u0440\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0430\u043c \u0432\u0441\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432 \u0441\u0435\u0442\u0438, \u0432\u0441\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0435\u0435 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u0431\u0445\u043e\u0434\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u0432\u0441\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0435\u0435 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u043e\u043f\u0440\u043e\u0441 \u00ab\u0410 \u043a\u0430\u043a \u0436\u0435 \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sravnenie-proizvoditelnosti-instrumentov-obhoda-blokirovok-vpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-09T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53774","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:46:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:56:36","updated":"2026-02-08 20:46:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=53774"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53774\/revisions"}],"predecessor-version":[{"id":157849,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53774\/revisions\/157849"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=53774"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=53774"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=53774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}