ISP/VPN's to China?

Alex Balashov abalashov at evaristesys.com
Wed Oct 21 23:36:40 UTC 2009


OpenVPN is ideal.  It functions purely over application-level UDP 
transport (IP-IP) instead of using GRE/IPSec/other encapsulation 
protocols that could potentially be blocked by a protocol filter on a 
router.  Route that traffic to a server outside of China and NAT it 
out to the rest of the Internet.

The default port is UDP 1194, but can easily be changed.

Anyone who wants to block it risks blocking any applications that use 
UDP in general, such as online games, Skype, etc.

It is precisely because the traffic has no signature distinguishable 
from normal application traffic - aside from the fact that the payload 
is encrypted - that it makes a good fit.

It's also open-source and free.

-- 
Alex Balashov - Principal
Evariste Systems
Web     : http://www.evaristesys.com/
Tel     : (+1) (678) 954-0670
Direct  : (+1) (678) 954-0671




More information about the NANOG mailing list