4 ms·

Would any of those can be used against China's GFW? Tailscale could be blocked by the GFW [1]. I guess that's because it uses a central beacon node? Also they

Would any of those can be used against China's GFW? Tailscale could be blocked by the GFW [1]. I guess that's because it uses a central beacon node? Also they are built on WireGuard, which is not obfuscated, so they can be detected by DPI? [1] https://forum.tailscale.com/t/does-tailscale-work-in-mainland-china/615/2 https://forum.tailscale.com/t/does-tailscale-work-in-mainlan...

gz5 4y ago
fully self-hosted is usually best, e.g.wireguard. zerotier is close. openziti, especially in cases in which app-specific VPNs help (each session looks like different encrypted apps, and you choose what apps).
simongray 4y ago
I have actually lived in China for 2 years and travelled there for maybe 6 months in total in addition to that. I've always just used a traditional, commercial VPN service such as ExpressVPN. In theory, those can also easily be blocked, but in my experience it rarely happens in practice. The main issue with living in China is the fact that the connections to the outside world are so clogged that using something like Youtube is often so slow that it's not even worth trying; that was the case in the Beijing area between 2016-2018 at least.
- temp8964 4y ago
  There is a "conspiracy" theory that those VPN works in China because they have a connection to the CCP. It would be amazing if Tailscale can use ExpressVPN kind of services for handshaking so that it can work inside the GFW.
  - simongray 4y ago
    I think self-hosting is the better solution if you're worried about someone blocking a VPN's IP address. I've heard those conspiracy theories, but to be honest I just accepted that everything was monitored when I was in China anyway. Installing something like Wechat/微信 basically gives tencent permission to everything that's on your (Android) phone anyway. To me, the VPN was solely about granting access to what was otherwise blocked, not about privacy.
    - temp8964 4y ago
      Yes. I am looking for something like Tailscale but can be self-hosted.
      - dsr_ 4y ago
        That would be headscale, mentioned above.
    - ykevinator2 4y ago
  - simongray 4y ago
    I am note able to reply to your other comment, so I'll reply here. Everything except for Tailscale (and possibly ZeroTier) on that list can be entirely self-hosted.
    - temp8964 4y ago
      Thanks. I will take a look.
api 4y ago
A ton of people seem to use ZeroTier in China. It's harder to block since you can self-host everything, which many in China do.

gz5 4y ago

fully self-hosted is usually best, e.g.wireguard. zerotier is close. openziti, especially in cases in which app-specific VPNs help (each session looks like different encrypted apps, and you choose what apps).

simongray 4y ago

I have actually lived in China for 2 years and travelled there for maybe 6 months in total in addition to that. I've always just used a traditional, commercial VPN service such as ExpressVPN. In theory, those can also easily be blocked, but in my experience it rarely happens in practice. The main issue with living in China is the fact that the connections to the outside world are so clogged that using something like Youtube is often so slow that it's not even worth trying; that was the case in the Beijing area between 2016-2018 at least.

temp8964 4y ago
There is a "conspiracy" theory that those VPN works in China because they have a connection to the CCP. It would be amazing if Tailscale can use ExpressVPN kind of services for handshaking so that it can work inside the GFW.
- simongray 4y ago
  I think self-hosting is the better solution if you're worried about someone blocking a VPN's IP address. I've heard those conspiracy theories, but to be honest I just accepted that everything was monitored when I was in China anyway. Installing something like Wechat/微信 basically gives tencent permission to everything that's on your (Android) phone anyway. To me, the VPN was solely about granting access to what was otherwise blocked, not about privacy.
  - temp8964 4y ago
    Yes. I am looking for something like Tailscale but can be self-hosted.
    - dsr_ 4y ago
      That would be headscale, mentioned above.
  - ykevinator2 4y ago
- simongray 4y ago
  I am note able to reply to your other comment, so I'll reply here. Everything except for Tailscale (and possibly ZeroTier) on that list can be entirely self-hosted.
  - temp8964 4y ago
    Thanks. I will take a look.

api 4y ago

A ton of people seem to use ZeroTier in China. It's harder to block since you can self-host everything, which many in China do.