It looks like Roskomnadzor launched another wave of blocking today. I live in Siberia, the region with the most aggressive DPI and the most stringent blocking of Western hosting providers. 90% of the web doesn't work here, but Hysteria2 has been working flawlessly (better than all the others) until today. This isn't a protocol issue, as previously reported, but targeted IP blocking. Even worse, after testing, it looks like only 120 out of 298 proxies are working.
My suspicion: I think there are Xeovo users who use russian government services, banking, public services, russian social media, and online stores without disabling proxies and VPNs. All Russian apps spy on network settings. I think a one-time mass mailing reminding people about basic digital hygiene would be a good idea. Thank you for your service; I really appreciate it.
20 Comments
Best way to block such agencies: https://github.com/C24Be/AS_Network_List
Ah another day, another wave of bans. Thanks for the report.
We will review existing servers and remove one's that seems to be mostly blocked for majority of users.
This isn't the "best" solution. Having 2 IP addresses for inbound and outbound is, but then again we don't really know how effective that is since it wasn't established what caused a block begin with. If a censor simply buys a subscription - i hope you see how any of those measures wouldn't be effective.
I think it's well known that VPN providers separate users into groups in order to provide them a secluded list of servers to enumerate censors this way, but doing this more effectively (rotating servers often) would harm people who use clients without subscription support.
I think the best solution is to not allow users open any Russian website or application, because they are all spying on VPNs
Support this post. It also forces users to implement split routing and excludes the risk of addresses leaks.
@0xVirtualCake is it possible?
So what the point of VPN then if you're revealing all your info to a russian sites and ISP. The ones in charge still can buy subscription as well
For you it's better to renew server's ip's every week? And most of Russian service do not allow you to open them with not-rus IP
It should work as the part global NGFW for VPN service against automated checks. Dual hop is too. Buy subscriptions...for hundreds of VPN services...good luck guys 😜btw a VPN service could insert sanity period for new subscribers limiting qty of different connectors to its servers.
Agree, this is confirmed, when you visit a Russian website it blocks you, then lists the incident ID, which is sent to their systems, so you reveal your pattern
Amnezia 3.1 protocol also addresses this issue of usage identification. this would help reduce the blocking of the IP host chances if deployed and deprecating the older versions from connecting.
Have same issue with blocked Hysteria2 and Vless. About 7-10 days ago in St. Petersburg stopped working about a half of all locations, which had been working flawlessly on any provider before. First thought was that it was only Rostelekom bans, but then I tested protocols and locations on other providers - same result.
Ping to lacations, for example, in v2rayN could work, but after I tried to open the site in a browser - met very common behaviour for DPI working - browser tried to download the page for a long time and then connection was interrupted.
So, Roskomnadzor blocked IPs.
Agree with the opinion, that probably nowadays the best way to protect IPs - to not allow users open Russian IPs, at least such things like marketplaces, governmental services etc.
Also the config Vless+Reality is still working well on any provider, but we don`t have it in Xeovo. So I would appreciate, if the team would add it to the list.
For me, Trojan+WS is way better solution, try it, it's working on about half of locations for me
only 3 hy2 locations are working😟
For me only 2(