4 ms·

I'm living in Shanghai. Still connected fine over a IPSec tunnel. I run my own VPN server on Rackspace/AWS (only 2 public IPs), the connection is and has been r

I'm living in Shanghai. Still connected fine over a IPSec tunnel. I run my own VPN server on Rackspace/AWS (only 2 public IPs), the connection is and has been relatively stable (about a year). 12MBit/s from Shanghai to the IPSec server in Hong Kong, 38ms consistent ping (100MBit/s connection). Using a Cisco SMB router, so the connection is pure IPSec and standard ports.

c1sc0 12y ago
How do you handle access from mobile devices? I found managing a VPN (from iPhone) more trouble than it's worth. Moving between networks often dropped the connection long enough to kill the VPN.
- schuke 12y ago
  Maybe you can try the Shadowsocks browser app from the App Store. It has a public SSH tunelling proxy. You can also use your own server settings if you have one. Works pretty well for basic web stuff.
  - c1sc0 12y ago
    Thanks. That's cool & would alleviate the pain a bit I guess. The thing that drove me nuts is that Slack was blocked, but I guess I could have run that from within a private browsing app like the one your recommended.
- logotype 12y ago
  Running my own L2TP/IPSec server for that as well. Older versions of iOS consistently closes the VPN connection when the phone was locked (or not connected via USB). iOS 8 is more stable it seems, because it keeps the VPN connection active for longer.
caractacus 12y ago
Cost?
- logotype 12y ago
  Instance cost for Rackspace is basically nothing depending on data transfer, they have a relatively new program they call Developer+[0] which is basically 50USD for free per month. The VPN server software is open-source, I use OpenSWAN (couldn't get the new fork Libreswan up an running correctly). [0] https://developer.rackspace.com/developer-plus/faq/#what_is https://developer.rackspace.com/developer-plus/faq/#what_is
ttflee 12y ago
I'm expecting to see that a version of IP over Avian Carriers with Chinese Characteristics (IPoACwCC) becomes true. Actually we can setup smuggling service like we smuggles brand new iPhones, discounted Louis Vuitton and stuffs out of Hong Kong. In the next decade, for example, when you want to file a pull request to github.com from Beijing, you just place an order at Taobao.com and save your pull request well in an SD card, mail to Shenzhen and wait for it being smuggled to the other side (Hong Kong), sent to github, and then the response being sent back. This service is expected to work just like pigeon-based and drone-based ones, in theory. The only concern not reassured is whether Hong Kong would fall under the siege of the Great Fire Wall. Meanwhile, I use ssh tunnel to connect to a major US-based cloud service provider at work and home in Beijing, and yes, the low speed and the long round trip time suck. And by now my own Strong VPN subscription still works.
- tiatia 12y ago
  The ping would be terrible but if you ship a box of DVDs the bandwidth would be decent.
  - josu 12y ago
    Relevant XKCD What if: When - if ever - will the bandwidth of the Internet surpass that of FedEx? https://what-if.xkcd.com/31/ https://what-if.xkcd.com/31/

c1sc0 12y ago

How do you handle access from mobile devices? I found managing a VPN (from iPhone) more trouble than it's worth. Moving between networks often dropped the connection long enough to kill the VPN.

schuke 12y ago
Maybe you can try the Shadowsocks browser app from the App Store. It has a public SSH tunelling proxy. You can also use your own server settings if you have one. Works pretty well for basic web stuff.
- c1sc0 12y ago
  Thanks. That's cool & would alleviate the pain a bit I guess. The thing that drove me nuts is that Slack was blocked, but I guess I could have run that from within a private browsing app like the one your recommended.
logotype 12y ago
Running my own L2TP/IPSec server for that as well. Older versions of iOS consistently closes the VPN connection when the phone was locked (or not connected via USB). iOS 8 is more stable it seems, because it keeps the VPN connection active for longer.

caractacus 12y ago

Cost?

logotype 12y ago
Instance cost for Rackspace is basically nothing depending on data transfer, they have a relatively new program they call Developer+[0] which is basically 50USD for free per month. The VPN server software is open-source, I use OpenSWAN (couldn't get the new fork Libreswan up an running correctly). [0] https://developer.rackspace.com/developer-plus/faq/#what_is https://developer.rackspace.com/developer-plus/faq/#what_is

ttflee 12y ago

I'm expecting to see that a version of IP over Avian Carriers with Chinese Characteristics (IPoACwCC) becomes true. Actually we can setup smuggling service like we smuggles brand new iPhones, discounted Louis Vuitton and stuffs out of Hong Kong. In the next decade, for example, when you want to file a pull request to github.com from Beijing, you just place an order at Taobao.com and save your pull request well in an SD card, mail to Shenzhen and wait for it being smuggled to the other side (Hong Kong), sent to github, and then the response being sent back. This service is expected to work just like pigeon-based and drone-based ones, in theory. The only concern not reassured is whether Hong Kong would fall under the siege of the Great Fire Wall. Meanwhile, I use ssh tunnel to connect to a major US-based cloud service provider at work and home in Beijing, and yes, the low speed and the long round trip time suck. And by now my own Strong VPN subscription still works.

tiatia 12y ago
The ping would be terrible but if you ship a box of DVDs the bandwidth would be decent.
- josu 12y ago
  Relevant XKCD What if: When - if ever - will the bandwidth of the Internet surpass that of FedEx? https://what-if.xkcd.com/31/ https://what-if.xkcd.com/31/