I'd like clearer answers regarding whitelists. I've read these posts:
https://hub.xeovo.com/posts/151-whitelist
https://hub.xeovo.com/posts/119-add-vpn-entry-node-in-russia-to-bypass-whitelists
https://hub.xeovo.com/posts/100-russia-introduces-whitelists
But they don't really provide an answer, at least to me. A simple yes/no answer is acceptable.
All questions below assume that the user assumes legal risks, costs, and basic setup.
1) Can the current whitelisting situation in Moscow be resolved technically? Regardless of the complexity of the setup on the user's end.
2) Can you provide setup instructions so that the entry server is located in Russia? Not so that you rent it, but so that the users themselves can do it?
3) Can you provide instructions on how to set everything up to use the "enemy" infrastructure as a transport?
4) Am I correct in understanding that your reluctance is due to the fact that you don't know how to monetize this? And set everything up to ensure the security of your servers?
11 Comments
STUN, VK/Yandex cloud, [redacted competitor name] in particular, ntc.party forumposts.
Which of the options you suggested do you personally use? I know about ntc.party. The problem is that 95% of the information there is either outdated or completely irrelevant.
The comments boil down to "you could try this...," but I didn't see any ready-made solutions. I need a solution, not just chatter about what might help. "It might help, it might not." "It's a 50/50 chance." "Will it work? Yes, it worked for me. It worked for an hour, and then it stopped."
That's a great plan, Walter. That's fuckin' ingenious, if I understand it correctly. It's a Swiss fuckin' watch.
Xeovo has a user base to get instant feedback on what works and what doesn't, as well as the necessary knowledge and skills. They'll spend a thousand times less time than I would searching for the necessary information.
There are no whitelists in my city, LTE is just being jammed. My business tried re-entering to parts of the country with whitelists but we ultimately deemed such solutions as temporary. Lucky ASN on VK/Ya cloud worked back when we tested this, but this might not be for long. Nobody can give you a guaranteed answer to your question. DPI isn't uniform.
"Enemy" also can be here communicating and collecting data. Ones who have solution, probably should not reveal it explicitly for sure.
Sorry for the delayed answer. Feels like we need to make separate blog post about whitelists, but for now I will try to simply answer it here instead.
Most likely yes.
Not at the moment, but we been thinking about this. We could provide simple script that you can run on your own machine, however you cannot just choose "any" server. The ASN/IP range has to be in the whitelist.
Previous answer in #2 covers this question.
Not really. It is just not suitable for mass deployment. Once "whitelisted" provider sees enormous amount of VPN/proxy traffic they will start to investigate and suspend the service. We will already break their TOS once the server is deployed, because commercial "foreign" VPN services are 100% forbidden.
From pricing perspective it can be challenging, because we are basically talking about cloud providers with expensive bandwidth pricing. In most cases bandwidth is billed by GB and there is no options to upgrade to unmetered traffic with 1GBps/10Gbps ports.
And I was starting to think you didn't like me :) It's just that it's not the first time I've noticed that you're taking longer to respond to me. Or maybe it just seemed that way to me.
Yes, I think a separate article would be helpful, because your old answers are very vague, at least to me. They sound like politicians' answers :)
not even using SNI? @0xVirtualCake
SNI spoofing is not enough, you need IP from whitelist.
Given the news of the introduction of a 15 GB monthly limit on international data traffic in Russia starting May 1, this issue is becoming relevant again.
I doomscrolled upon hearing the news, and it is seemingly just a recommendation, not a law/requirement per se