1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

open vpn over ssh

Discussion in 'Asuswrt-Merlin' started by ratte61, Jan 19, 2020.

  1. ratte61

    ratte61 Occasional Visitor

    Joined:
    Jan 6, 2018
    Messages:
    10
    hello

    i have an rt ac 5300 and the latest great firm from merlin.
    i want to spent holiday in ägypt and i want to driver open vpn over the intern shh server of my router-
    how please are the settings of the router step by step to work open vpn over ssh, or better ideas to overrule their dpi inspection ??

    thanks for your help,i am a neebe here :)
     
  2. octopus

    octopus Very Senior Member

    Joined:
    Jul 17, 2012
    Messages:
    1,297
    You can use a vpn-service using "tls-crypt" in openvpn the you can bypass theirs packet inspection.
     
    ratte61 likes this.
  3. ratte61

    ratte61 Occasional Visitor

    Joined:
    Jan 6, 2018
    Messages:
    10
    thanks !!
     
  4. octopus

    octopus Very Senior Member

    Joined:
    Jul 17, 2012
    Messages:
    1,297
    If you use OVPN.com and Singapore then tls is encrypted.
    https://www.ovpn.com/

    Code:
    <tls-crypt>
    -----BEGIN OpenVPN Static key V1-----
    
    -----END OpenVPN Static key V1-----
    </tls-crypt>
    
    You can contact me for an invitate code, via PM.
    @ratte61
     
  5. netware5

    netware5 Senior Member

    Joined:
    Mar 9, 2013
    Messages:
    441
    Location:
    Bulgaria
    That does not work. I've been in Egypt two years ago and their dpi managed somehow to detect my OpenVPN and killed connection.
     
  6. octopus

    octopus Very Senior Member

    Joined:
    Jul 17, 2012
    Messages:
    1,297
    Oki and which provider do you use?
     
  7. netware5

    netware5 Senior Member

    Joined:
    Mar 9, 2013
    Messages:
    441
    Location:
    Bulgaria
    My own OpenVPN server on my router. Configured with tls-crypt :)
     
  8. ratte61

    ratte61 Occasional Visitor

    Joined:
    Jan 6, 2018
    Messages:
    10
    i dont know which provider are in ägypt ?
    i will take anyone ?? :)
     
  9. octopus

    octopus Very Senior Member

    Joined:
    Jul 17, 2012
    Messages:
    1,297
    Okay, but i suggested a vpn-provider to use from abroad. What I have read on their website is working. They offer a test in 5 hour.
     
  10. netware5

    netware5 Senior Member

    Joined:
    Mar 9, 2013
    Messages:
    441
    Location:
    Bulgaria
    My OpenVPN server is also from abroad (it is in Bulgaria). It doesn't matter which OpenVPN service provider is - commercial or private (my own OpenVPN server) . If the protection is based only on tls-crypt they will detect it. The same applies for GFW of China. If the Singapore provider you mentioned declares that their service is undetectable, maybe they use some additional measures to obfuscate the traffic. I've read that they provide their own OpenVPN client, so maybe they added some obfuscation inside. There are many methods and applications to implement OpenVPN obfuscation available in Internet, but most of them are effective only for certain period until the Big Brother updates the Great Firewall. This is a never ending game :)
     
    Last edited: Jan 19, 2020