this post was submitted on 10 Aug 2023
1075 points (98.4% liked)

Technology

61456 readers
3961 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
1075
Russia starts blocking VPN at the protocol (WireGuard, OpenVPN) level (vpncentral.com)
submitted 2 years ago by [email protected] to c/[email protected]
194 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 3 points 2 years ago* (last edited 2 years ago) (1 children)

Is OpenVPN not just SSL traffic?

It's not, it's an IPSec VPN by default which runs over UDP. You can run it via TCP and it operates over the same port as HTTPS (443), but it's not the same protocol and can be differentiated that way.

A way around this would be to run an SSLVPN with a landing page where you log in instead of using an IPSec VPN or a dedicated SSLVPN client.

Another way around it would be to create a reverse SSH tunnel on a VM/VPC in another country/state and send all your traffic through that.

[–] [email protected] 5 points 2 years ago* (last edited 2 years ago)

Is OpenVPN not just SSL traffic?

It’s not, it’s an IPSec VPN by default which runs over UDP. You can run it via TCP and it operates over the same port as HTTPS (443), but it’s not the same protocol and can be differentiated that way.

I think that either I'm misunderstanding what you're aiming to say, or that this is incorrect.

OpenVPN can run over UDP or TCP, but it's not IPSec, not even when running over UDP. IPSec is an entirely separate protocol.