Explorar el Código

Mention TLS wrapper

Bob Mottram hace 7 años
padre
commit
0359de62c1
Se han modificado 2 ficheros con 21 adiciones y 15 borrados
  1. 2
    0
      doc/EN/app_vpn.org
  2. 19
    15
      website/EN/app_vpn.html

+ 2
- 0
doc/EN/app_vpn.org Ver fichero

24
 
24
 
25
 Using a Tor browser is another way to get around censorship, but there might be occasions where you don't want to use a Tor browser or where Tor relays and bridges are blocked or where you want to run internet apps which aren't within a browser.
25
 Using a Tor browser is another way to get around censorship, but there might be occasions where you don't want to use a Tor browser or where Tor relays and bridges are blocked or where you want to run internet apps which aren't within a browser.
26
 
26
 
27
+On Freedombone the VPN is wrapped within a TLS layer of encryption, making it difficult for any deep packet inspection systems to know whether you are using a VPN or not. Since there is lots of TLS traffic on the internet your connection looks like any other TLS connection to a server, and this may help to avoid being censored. It's probably not possible for your local ISP to block TLS traffic without immediately generating a lot of irate customers, and stopping any kind of commercial activity.
28
+
27
 * Installation
29
 * Installation
28
 
30
 
29
 ssh into the system with:
31
 ssh into the system with:

+ 19
- 15
website/EN/app_vpn.html Ver fichero

3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5
 <head>
5
 <head>
6
-<!-- 2017-09-27 Wed 17:43 -->
6
+<!-- 2017-09-27 Wed 17:58 -->
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
9
 <title>&lrm;</title>
9
 <title>&lrm;</title>
262
 Using a Tor browser is another way to get around censorship, but there might be occasions where you don't want to use a Tor browser or where Tor relays and bridges are blocked or where you want to run internet apps which aren't within a browser.
262
 Using a Tor browser is another way to get around censorship, but there might be occasions where you don't want to use a Tor browser or where Tor relays and bridges are blocked or where you want to run internet apps which aren't within a browser.
263
 </p>
263
 </p>
264
 
264
 
265
-<div id="outline-container-org74feb72" class="outline-2">
266
-<h2 id="org74feb72">Installation</h2>
267
-<div class="outline-text-2" id="text-org74feb72">
265
+<p>
266
+On Freedombone the VPN is wrapped within a TLS layer of encryption, making it difficult for any deep packet inspection systems to know whether you are using a VPN or not. Since there is lots of TLS traffic on the internet your connection looks like any other TLS connection to a server, and this may help to avoid being censored. It's probably not possible for your local ISP to block TLS traffic without immediately generating a lot of irate customers, and stopping any kind of commercial activity.
267
+</p>
268
+
269
+<div id="outline-container-org778c839" class="outline-2">
270
+<h2 id="org778c839">Installation</h2>
271
+<div class="outline-text-2" id="text-org778c839">
268
 <p>
272
 <p>
269
 ssh into the system with:
273
 ssh into the system with:
270
 </p>
274
 </p>
284
 </div>
288
 </div>
285
 </div>
289
 </div>
286
 
290
 
287
-<div id="outline-container-org1a94be0" class="outline-2">
288
-<h2 id="org1a94be0">Usage</h2>
289
-<div class="outline-text-2" id="text-org1a94be0">
291
+<div id="outline-container-org2cfcc49" class="outline-2">
292
+<h2 id="org2cfcc49">Usage</h2>
293
+<div class="outline-text-2" id="text-org2cfcc49">
290
 <p>
294
 <p>
291
 When the installation is complete you can download your VPN keys and configuration files onto your local machine.
295
 When the installation is complete you can download your VPN keys and configuration files onto your local machine.
292
 </p>
296
 </p>
331
 </div>
335
 </div>
332
 </div>
336
 </div>
333
 
337
 
334
-<div id="outline-container-orgf3e0fef" class="outline-2">
335
-<h2 id="orgf3e0fef">Changing port number</h2>
336
-<div class="outline-text-2" id="text-orgf3e0fef">
338
+<div id="outline-container-orgc7282cd" class="outline-2">
339
+<h2 id="orgc7282cd">Changing port number</h2>
340
+<div class="outline-text-2" id="text-orgc7282cd">
337
 <p>
341
 <p>
338
 Avoiding censorship can be a cat and mouse game, and so if the port you're using for VPN gets blocked then you may want to change it.
342
 Avoiding censorship can be a cat and mouse game, and so if the port you're using for VPN gets blocked then you may want to change it.
339
 </p>
343
 </p>
344
 </div>
348
 </div>
345
 
349
 
346
 <p>
350
 <p>
347
-Select <b>Administrator controls</b> then <b>App Settings</b> then <b>vpn</b>. Choose <b>Change TLS port</b> and enter a new port value. You can then either manually change the port within your VPN configuration files, or download them again as described in the <a href="#org1a94be0">Usage</a> section above.
351
+Select <b>Administrator controls</b> then <b>App Settings</b> then <b>vpn</b>. Choose <b>Change TLS port</b> and enter a new port value. You can then either manually change the port within your VPN configuration files, or download them again as described in the <a href="#org2cfcc49">Usage</a> section above.
348
 </p>
352
 </p>
349
 </div>
353
 </div>
350
 </div>
354
 </div>
351
 
355
 
352
-<div id="outline-container-org98985f3" class="outline-2">
353
-<h2 id="org98985f3">Generating new keys</h2>
354
-<div class="outline-text-2" id="text-org98985f3">
356
+<div id="outline-container-orgbe4ddea" class="outline-2">
357
+<h2 id="orgbe4ddea">Generating new keys</h2>
358
+<div class="outline-text-2" id="text-orgbe4ddea">
355
 <p>
359
 <p>
356
-It's possible that your VPN keys might get lost or compromised on your local machine. If that happens you can generate new ones from the <b>Administrator controls</b> by going to <b>App Settings</b> then <b>vpn</b> then choosing <b>Regenerate keys for a user</b> and downloading the new keys as described in the <a href="#org1a94be0">Usage</a> section above.
360
+It's possible that your VPN keys might get lost or compromised on your local machine. If that happens you can generate new ones from the <b>Administrator controls</b> by going to <b>App Settings</b> then <b>vpn</b> then choosing <b>Regenerate keys for a user</b> and downloading the new keys as described in the <a href="#org2cfcc49">Usage</a> section above.
357
 </p>
361
 </p>
358
 </div>
362
 </div>
359
 </div>
363
 </div>