Comment on FOSS Deep Packet Inspection software?

i_uuuh_what@lemmy.world ⁨1⁩ ⁨year⁩ ago

• MigratingtoLemmy@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Thank you, I didn’t know much about this project before. How does it compare to the usual IPSec, OpenVPN, Softether and Wireguard?

  source

  • i_uuuh_what@lemmy.world ⁨1⁩ ⁨year⁩ ago

    To be honest, I’m also not that knowledgeable about it even though I do have it running on a VPS. And can’t say I’m too knowledgeable about networking/VPNs either - I do use Wireguard which I also manage, but that’s about it.

    So, some bulletpoints instead:

    • It’s kinda a pain to set up
    • It’s default server configuration logs all requests, so you might want to disable this
    • As far as I understand, it’s more of a proxy than a VPN, so you won’t be able to make connections from one client to another
    • It mimics standard HTTPS
    • When using the “reality” protocol it successfuly mimics any website of your choosing for any unauthenticated clients by forwarding HTTPS certificates and whatnot, which protects you from active probing
    • People use it to get around the Great Firewall of China

    source

    • MigratingtoLemmy@lemmy.world ⁨1⁩ ⁨year⁩ ago

      Thanks for the note. Good to know that it is more like a proxy which simulates SSL: makes it similar to stunnel. I will likely have to run a VPN protocol underneath with this on top.

      Funny, I heard obfsproxy is used to circumvent the Chinese firewall too. I’ll have to take a look, thanks

      source

      • moonpiedumplings@programming.dev ⁨1⁩ ⁨year⁩ ago

        I heard obfsproxy

        Yeah, tor obs4 bridges.

        But somehow, my high school managed to block those. My high school was literally more locked down than the great firewall of China.

        I set up: github.com/cognetwork-dev/Metallic

        At first, then I eventually switched to github.com/v2ray/v2ray-core as metallic struggled on some things. Both v2ray and xray are built for the great firewall of China, and iirc, they use the same tech.

        source

        • -> View More Comments
      • i_uuuh_what@lemmy.world ⁨1⁩ ⁨year⁩ ago

        Yeah, no problem.

        I did try wrapping Wireguard inside of xray, but didn’t manage to make it work. Not sure if it’s impossible, but yeah.

        xray clients can work as a system-wide VPN if you’re worried about usability. Just no communication between different machines connected to the same server (probably).

        source

        • -> View More Comments