6 ms·
I am in Iran , you cannot believe it , same here , They use deep packet inspection too, they will shut every package down. every open vpn , cisco vpn , etc conn
by 0xFFC 11y ago
I am in Iran , you cannot believe it , same here , They use deep packet inspection too, they will shut every package down. every open vpn , cisco vpn , etc connection will lose connection every 2-3 min . Connection to outside web is almost impossible.
I have noticed they have multiple situation, for example when everything's quiet internet is not so bad (despite the fact bandwidth is extremely low for huge amount of people), but when some news came out about government corruption, guess what ? some vpn does not work . In 2009 green movement they closed every https connection.(maybe that was red alert situation)
p.s : https://en.wikipedia.org/wiki/Deep_packet_inspection https://en.wikipedia.org/wiki/Deep_packet_inspection
p.s. : I use vps from netherlands for bypassing firewall. but It takes huge amount of time and a little money.but the point is 99.999% people don't have this option (I use shadowsocks, sometimes another tunnels) so they use internet the way is or some software like freegate and other but with extremely low speed unbearable lag.
p.s. : pptp, l2ps and others are closed right now. even president rohani couldn't manage the situation . I have heard he did want to do something but supreme leader and his people stopped him.
- yyhhsj0521 11y agoI heard rumors that that before Halal Internet was launched the censorship of Iran was relegated to Huawei, the same company that builds and maintains the Great Firewall...
- 0xFFC 11y agoYes , I have heard it too . halal internet not going to launch , because Rohani is not believe in it and tries to postpone it every year(maybe they have technical issues too , I don't have information) . all military site's have ethernet and connect to each other with it.
- geff82 11y agowish you all the best. I pay 5$ for a digitalocean droplet to provide my family in Iran with an OpenVPN connection. This works quite well, we do not have any issues so far.
- dujiulun2006 11y agoI'm not sure but I suspect that they got the technology (hardware and software) from China too. As a Chinese netizen I don't know if I should be proud that we have world-class advanced technology or be ashamed. Possibly ashamed.
- danmaz74 11y agoI propose proud of the technologists, ashamed of the political system :)
- leoc 11y agoAllegedly it's mostly or at least originally Cisco's technology: https://insidersurveillance.com/cisco-huawei-and-semptian-a-look-behind-the-great-firewall-of-china/ https://insidersurveillance.com/cisco-huawei-and-semptian-a-... .
- njloof 11y agoAnd let's not forget BlueCoat. These are our colleagues designing and implementing these tools of oppression. We should ask them why they exercise their talents in this way.
- peterhadlaw 11y agoThey probably appreciate having their family alive...or something. It'd be better if our colleagues who don't have their hands and relatives tied to create and proliferate liberating software.
- pekk 11y agoAre you saying that Blue Coat (based in Sunnyvale, California) develops censorship tools in order to keep their family alive? Who is threatening them?
- fastandfurryous 11y agoIt doesn't take much to motivate someone to do it. A paycheck is enough 99.99% of the time.
- imanrahmati 11y agoIPsec and OpenVPN are open in Iran. Obviously you don't know what deep packet inspection is, or never tried to implement it, otherwise you wouldn't say that.
- aidanhs 11y agoA few years ago I had a friend visiting Iran who wanted unrestricted access to sites. I didn't have any personal Linux servers on the internet at the time, but I did have a Windows one with Remote Desktop licenses. It turned out that RDP actually worked pretty well. I did hesitate to post this in case it's seen by the wrong people(!), though given it's a while since it was necessary to use, it may be blocked by now anyway. I wonder if it was available because it was relatively little known and, if so, what other little known protocols might be available.
- 0xFFC 11y agosadly with RDP you cannot have same experience.it is not about 1 or 2 site , for example for me , my vpn connection is always on because there is not internet without it.but with RDP loging into another machine , with all lag you see , is almost impossible at least for power user like me which most of the time have 50+ tab open in chrome in site's like youtube , android dev doc's, etc.
- SeeDave 11y agoYou can RDP into a machine and use the browser there.
- Falkirks 11y agoBut you have to send a packet every time the remote screen changes. It is much more demanding on network resources than a VPN and thus will be more difficult to use on a daily basis.
- MarcosDione 11y agoWhy nos havig a local cache like wwwoffle (someone has to reimplement such a thing) or squid? that way you won't need a connection just to browse a bunch of (mostly static?) html pages... just sayin'.
- fridsun 11y ago
- tokenizerrr 11y agoI have a friend in Iran and I let him use one of my servers as a proxy using the ssh -D flag. This has been working well so far as I know.