docker-ipsec-vpn-server VS GoodbyeDPI

IPSEC-L2TP is built into everything. No clients required on Windows, Mac, Android, iOS, Linux, etc. Great Docker container for cutting through most of the difficulty here: https://hub.docker.com/r/hwdsl2/ipsec-vpn-server

e.g: https://mingheng.medium.com/how-to-setup-an-openvpn-server-with-docker-on-an-aws-ec2-in-15-minutes-50443bd31dff atau https://github.com/hwdsl2/docker-ipsec-vpn-server

I'm currently using hwdsl2's VPN Docker container on my server so that I can access my internal network resources while away from my home network. However, it seems that if I connect through my DuckDNS pointer, the connection takes a long time to establish (iOS/macOS will simply say "Connecting..."). I know that this would be a question to raise an issue about, which I did so here. In a nutshell, the developer of the container believes that it would be an issue on DuckDNS' end.

Setup your VPN (one image I found on hub.docker.com is https://hub.docker.com/r/hwdsl2/ipsec-vpn-server)

https://hub.docker.com/r/hwdsl2/ipsec-vpn-server ..?

My suggestion: Don't open up ssh to the world, set up a vpn to your home network instead, then connect to your server just as if it was on the loc network. Here's a possible option to setting up a VPN using docker: https://hub.docker.com/r/hwdsl2/ipsec-vpn-server

I use this and it works very well for me

Right now, it is accessible only through VPN. Even programs like DPI blocker are not helping

As in you cant access those sites (you got redirected to the ISP site)? Try changing your dns (make sure to clear your dns cache too) and try using goodbyedpi. Recently my country start enforcing isp to block piracy sites along with other sites (porn, reddit, etc) but since their method is just to use dpi, i could just use goodbyedpi to bypass it.

ÖNCE BU GİTHUB PROJESINE GIRIYORSUNUZ https://github.com/ValdikSS/GoodbyeDPI

Russian internet censorship is very simple. They don't seem to be using DPI to target VPN protocols at all, instead trying to block IPs/subnets of known commercial VPN providers. Blocking IPs, subnets, and domains is the primary operating mode of Roskomnadzor.

There allegedly is DPI, but it only comes into play as an extra measure against things like domain fronting, proxies, and plaintext HTTP. It'd look at the SNI and inject a RST packet to drop the connection. As it does not even try to implement TCP, analyzing each IP packet in isolation, there are various interesting utilities[1] that mess with it by, for example, splitting the TLS ClientHello into two TCP packets in the middle of the domain name.

[1] https://github.com/ValdikSS/GoodbyeDPI

Also, try this tool, you'll find that unblocks most content for you. Good luck!

Cobain GoodbyeDPI. Masukin ke task scheduler biar auto nyala dan hide window nya.