Hacker News Reader

Comment by chvid | Hacker News Reader

Every expat in China I have met paid a few dollars a month for a VPN and had as much Facebook, Google, YouTube as the rest of us.

Are you only referring to Great Firewall when you say that "life here is simply impossible"?

View on HN

I have 4 (ExpressVPN, VyprVPN, StrongVPN, and a fourth I'll never tell anyone where it is). They do not reliably connect, are prone to attacks from the government and even when they do connect, you'll be throttled into oblivion. Before I discovered Shadowsocks (Chinese went to clouds house and made him remove it from github), my VPN would, within 3-5 minutes, be throttled to about 128k average speed. I would be elated if I could get a 1 MBps connection out. And for those wondering, I pay for 200MBps and I do get that in within the Chinese intranet.

You say you went to MIT and don't know how to set up your own VPN server?

Fairly certain the GFC can ferret out any VPN you can set up on your own.

Not exactly. If you use an standard VPN protocol right out of the box (read: OpenVPN), then yes it is automatically blocked. The OpenVPN SSL handshake is different to regular SSL.

There are certain ways you can disguise the traffic and the VPN companies that specialize in China do that- but the GFW is regularly updated so what works today probably won't work next month.

The other issue is that even if you do get a VPN working, they have a tendency to throttle your connection. VPN traffic is quite different to your regular http/https.

Aren't you snarky... Read carefully. I have a fourth. And that wouldn't fix it anyway. They detect it on the protocol level. They posison your DNS.

That's a legitimate question, setting up an OpenVPN server is trivial. I am curious, have you tried using obfusproxy or an alternate way to obfuscate your vpn traffic?

Reply on news.ycombinator.com