From 0359de62c1901c447d27b8e45d9d859cf6aae26f Mon Sep 17 00:00:00 2001 From: Bob Mottram Date: Wed, 27 Sep 2017 17:58:18 +0100 Subject: [PATCH] Mention TLS wrapper --- doc/EN/app_vpn.org | 2 ++ website/EN/app_vpn.html | 34 +++++++++++++++++++--------------- 2 files changed, 21 insertions(+), 15 deletions(-) diff --git a/doc/EN/app_vpn.org b/doc/EN/app_vpn.org index d25c3e0c..0d991799 100644 --- a/doc/EN/app_vpn.org +++ b/doc/EN/app_vpn.org @@ -24,6 +24,8 @@ A Virtual Private Network (VPN) allows you to move your internet traffic to a di Using a Tor browser is another way to get around censorship, but there might be occasions where you don't want to use a Tor browser or where Tor relays and bridges are blocked or where you want to run internet apps which aren't within a browser. +On Freedombone the VPN is wrapped within a TLS layer of encryption, making it difficult for any deep packet inspection systems to know whether you are using a VPN or not. Since there is lots of TLS traffic on the internet your connection looks like any other TLS connection to a server, and this may help to avoid being censored. It's probably not possible for your local ISP to block TLS traffic without immediately generating a lot of irate customers, and stopping any kind of commercial activity. + * Installation ssh into the system with: diff --git a/website/EN/app_vpn.html b/website/EN/app_vpn.html index 59283898..566214c0 100644 --- a/website/EN/app_vpn.html +++ b/website/EN/app_vpn.html @@ -3,7 +3,7 @@ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> - + ‎ @@ -262,9 +262,13 @@ A Virtual Private Network (VPN) allows you to move your internet traffic to a di Using a Tor browser is another way to get around censorship, but there might be occasions where you don't want to use a Tor browser or where Tor relays and bridges are blocked or where you want to run internet apps which aren't within a browser.

-
-

Installation

-
+

+On Freedombone the VPN is wrapped within a TLS layer of encryption, making it difficult for any deep packet inspection systems to know whether you are using a VPN or not. Since there is lots of TLS traffic on the internet your connection looks like any other TLS connection to a server, and this may help to avoid being censored. It's probably not possible for your local ISP to block TLS traffic without immediately generating a lot of irate customers, and stopping any kind of commercial activity. +

+ +
+

Installation

+

ssh into the system with:

@@ -284,9 +288,9 @@ Only use ports 443 or 80 for VPN as an absolute last resort, since doing
-
-

Usage

-
+
+

Usage

+

When the installation is complete you can download your VPN keys and configuration files onto your local machine.

@@ -331,9 +335,9 @@ You should see a series of messages with "Initialization Sequence Completed
-
-

Changing port number

-
+
+

Changing port number

+

Avoiding censorship can be a cat and mouse game, and so if the port you're using for VPN gets blocked then you may want to change it.

@@ -344,16 +348,16 @@ Avoiding censorship can be a cat and mouse game, and so if the port you're using

-Select Administrator controls then App Settings then vpn. Choose Change TLS port and enter a new port value. You can then either manually change the port within your VPN configuration files, or download them again as described in the Usage section above. +Select Administrator controls then App Settings then vpn. Choose Change TLS port and enter a new port value. You can then either manually change the port within your VPN configuration files, or download them again as described in the Usage section above.

-
-

Generating new keys

-
+
+

Generating new keys

+

-It's possible that your VPN keys might get lost or compromised on your local machine. If that happens you can generate new ones from the Administrator controls by going to App Settings then vpn then choosing Regenerate keys for a user and downloading the new keys as described in the Usage section above. +It's possible that your VPN keys might get lost or compromised on your local machine. If that happens you can generate new ones from the Administrator controls by going to App Settings then vpn then choosing Regenerate keys for a user and downloading the new keys as described in the Usage section above.