What is the DPI (Deep Packet Inspection)?

Deep packet inspection (DPI) is an advanced technique used to examine and manage network traffic. It employs packet filtering to locate, identify, classify, reroute or block packets with a specific code or data payload. Conventional packet filtering can’t detect DPI, as it only looks at packet headers.

Deep Packet Inspection tools

Network administrators often use DPI as a security tool to detect and intercept viruses and other types of malicious traffic. However, they can also use it for disreputable activities, such as eavesdropping.

Deep Packet Inspection is also used to streamline the flow of network traffic. A message that is, for example, flagged as a high priority can be sent to its destination before low-priority packets or messages. DPI can also be used to improve network performance by throttling data transfer, thereby preventing peer-to-peer abuse.

DPI has sparked concern among proponents of Net Neutrality and privacy advocates, as it is possible to identify both the recipient and originator from content enclosing specific packets.

What is Obfuscation?

Obfuscating means to make something obscure. When applied to Internet traffic, obfuscating implies that you are trying to hide its real purpose, similar to putting on a disguise.

Obfuscation techniques

Obfuscation is often used to hide TOR or VPN traffic (VPN obfuscation). As some governments and ISPs block connections to these services obfuscation prevents anyone from seeing that your internet traffic is encrypted. It is also used to bypass firewalls so that restricted websites can be accessed. While these objectives may be slightly different, the same method is used to achieve both.

When special tools obfuscate Internet traffic, its original form is changed to a discrete structure that makes it look like regular Internet traffic. When users connect to a VPN, encrypted traffic is altered to look like regular, unencrypted internet traffic. However, the encryption will still be present, and your data will not be readable. Thus, it results in undetectable VPN traffic.

Obfuscation and ISP policies

Whether or not obfuscation will help with the loss of net neutrality remains to be seen, as it depends on what ISPs decide to do in the future. If they choose to block VPN and TOR traffic, then obfuscation will be useful, but if they start charging different rates for using specific services, then your options are limited.

In the latter case, all you’ll be able to do is to make it appear as if you’re using a cheaper service than what you are. One example will be if an ISP charges $1.50/Mb for normal browsing and $2.50/Mb for gaming. Internet traffic could be obfuscated to look like regular browsing instead of gaming to pay the lower rate.

What is Stealth VPN?

A Stealth VPN is a VPN protocol that can let VPN traffic appear as if it is regular web traffic, even when a network administrator activates a DPI firewall.

Firewalls are commonly used to block VPNs in countries where Internet access is restricted or censored. Some examples would include China, Iran, the United Arab Emirates, countries where VPN is illegal. Network administrators also often block VPN access for a company or school network to improve monitoring and control of network activity.

A StealthVPN service will allow you to quickly bypass these blocking mechanisms to create VPN tunnels through a firewall, including the Firewall of China.

How Stealth VPNs work

Though people commonly use the term ‘Stealth,’ it would be more accurate to describe the technology as ‘VPN Camouflage.’ A ‘Stealth’ VPN disguises VPN data packets as regular Internet traffic. The most advanced implementations obfuscate the VPN traffic into HTTPS traffic.

What is HTTPS traffic?

HTTPS connections are crucial for secure data transmissions on the Internet where credit card numbers, passwords, etc. are used. That’s why most firewalls, even if they are very restrictive, won’t block HTTPS packets, making stealth VPN technology very efficient.

SSL or TLS encryption secures the HTTPS traffic. Online banking and credit card transactions use it to increase security, as well as sites like Facebook and Google. If you see the ‘lock’ icon in your browser bar and ‘https’ before the ‘www’ in the URL, you know that your browser uses https. Routers and firewalls identify HTTPS traffic because it always uses port #443.

Stealth VPN techniques can efficiently use this characteristic of HTTPS traffic to impersonate HTTPS data and bypass firewalls undetected.

StealthVPN protocols

OpenVPN

OpenVPN has the best combination of cross-platform compatibility, security, and speed. Therefore, most Stealth VPN servers use OpenVPN encryption to reap these benefits. A local stealth proxy (called obfsproxy) modulates and obfuscates the OpenVPN traffic into regular Internet traffic.

SSTP

SSTP (Secure Socket Tunneling Protocol) is another stealth protocol that VPN enthusiasts use. But, this protocol is only available on Windows, and not all VPN providers offer it. As SSTP uses SSL encryption as its primary encryption algorithm natively, it does have a significant advantage.

Softether

The relatively new Softether protocol provides the third approach. Due to its SSL-VPN Tunneling on HTTPS, it can ‘penetrate’ highly-restricted firewalls.

StealthVPN vs. OpenVPN

The most common SteathVPN implementations are using OpenVPN and obfsproxy.

A typical data packet used with OpenVPN consists of a header that contains packet identification and routing information. The payload is the strongly encrypted part of the data packet which is forwarded to the correct web address. The header information is used to identify the source of a package, including the port # and the fact that the container contains OpenVPN data.

A stealth VPN uses obfuscation to strip the metadata that identifies the data as belonging to a VPN protocol from the packet header. The disguised packet looks like regular HTTPS encrypted web traffic by using the fact that https uses SSL/TLS Encryption and port #443.

The obfuscation is done by wrapping the OpenVPN data packet (using the obfsproxy local proxy) in a secondary layer of encryption, and assigning the data to port #443 or any other port.

When stealth technology has these two steps, the data packet can’t be distinguished from regular https data or regular Internet traffic, and it is virtually impossible to block.

When and why do you need StealthVPN?

Avoid VPN blocks, and access blocked websites

For some, a Stealth protocol is an absolute necessity. For people located in countries such as the UAE, China, or Iran, it would be difficult (or virtually impossible) to access specific websites without making use of stealth VPN technology. In some countries like Iran, using a VPN is a crime, so it is critical that you make sure your VPN is undetectable.

Avoid throttling and protect your privacy

There are also those that choose to use Stealth VPNs to protect their privacy or to avoid throttling. Although some firewalls don’t block VPN traffic, they do throttle it, slowing it down dramatically. You should know that even major ISPs like mobile providers do this.

Stealth VPN providers

Several excellent VPN providers offer StealthVPN (secure VPN) connections on their servers (check the list below).

ibVPN

ibVPN is one of my favorite VPN services as it provides a lot of exciting features (take a look at my complete ibVPN review), including a variety of servers or protocols. Regarding StealthVPN, ibVPN includes access to all three implementations (OpenVPN with obfsproxy, SSTP and Softether). The first two options are available within the Windows application, while users may install Softether on Windows, Linux, and Mac OS as a standalone client app.

IPVanish

IPVanish can obfuscate the OpenVPN traffic on two ports: 1194 and 443 (HTTPS). Choose the port and check the Obfuscate OpenVPN traffic option. It is available for the Windows application.

VyprVPN

VyprVPN has developed its proprietary stealth VPN protocol known as ‘Chameleon Protocol.’ The VyprVPN Chameleon uses a 256-bit OpenVPN encryption obfuscated and transmitted via TLS port #443. Thus, Users that live in or travel to countries such as China, Russia, India, Turkey, Iran, and Syria can access the Internet unrestricted. The Chameleon VPN is available for Windows, Mac, Android, and VPN routers.

TorGuard VPN

TorGuard bases its stealth VPN implementation on dedicated ‘Stealth’ VPN servers. Users can access these servers from the Windows, macOS, and Android apps. Also, the Stealth Proxy feature inside the TorGuard VPN apps adds a “second” layer of security that connects your standard VPN connection through an encrypted proxy layer. When enabled, the Stealth Proxy hides the “handshake,” making it impossible for the DPI firewalls to determine if VPN software is being used. A plus for TorGuard is that it offers dedicated IP address options in many locations.

Perfect Privacy

Perfect Privacy uses OpenVPN to implement Stealth VPN technology. You may obfuscate your VPN traffic by tunneling it through stunnel, ssh or obfsproxy2/obfsproxy3. Also, you can choose the connection ports #22 (SSH), #53 (DNS) and #443 (SSL). Perfect Privacy offers the StealthVPN protocol into the Windows client, or you may set up the obfuscation manually with OpenVPN on Linux and Mac.

VPN.ac

The VPN.ac ‘Stealth VPN’ secure protocol applies a technique called XOR obfuscation on the OpenVPN traffic. The OpenVPN XOR is similar to OpenVPN 256-bit regarding key strength. However, the symmetric cipher is different, AES 128-bit being faster and less CPU intensive than AES 256-bit. Running the OpenVPN XOR over port TCP #443 should bypass most firewalls/web-filtering engines. It is available on the Windows application.

Conclusion

Using stealth VPNs will camouflage your VPN and make it appear as regular web traffic. Stealth VPNs are mainly used for privacy purposes, or to bypass firewalls in countries where Internet access is restricted or censored.

Raspberry PI is a wonderful device: so simple, yet so powerful and useful. As a regular VPN user, you will probably want to set up a VPN connection on your Rasp as well. The process is not trivial, but it can be done without much hassle. Learn how to set up a Raspberry PI VPN.

What is Raspberry Pi?

As you probably know, the Raspberry Pi is a tiny computer that was built to promote the teaching of basic computer science in schools and developing countries. Since its launch in 2015, it becomes very popular (more than 12M units sold so far) due to its cost (between $5 and $35), its simplicity and versatility. Raspberry Pi is now the preferred tool for hobbyists, students, and even hackers.

What can you do with a Raspberry Pi?

Well, you may use it in any project that involves a small computational unit. You may even use it as a desktop PC.

Are you new to Raspberry Pi? Here are two articles that may give you an idea of what to do next: MakeUseOf – Raspberry Pi Projects for Beginners and LifeHacker – Top 10 Raspberry PI Projects for Beginners.

What is RaspberryPI VPN and why would you need one?

If you are using your Raspberry PI as a desktop computer, then you may need VPNs (Virtual Private Networks) to: secure your Internet connection, protect yourself from hackers or unblock restricted websites.

As expected, due to hardware and software restrictions, you may NOT use a Raspberry Pi VPN in the same way you use a VPN on a regular desktop or laptop.

How to configure the VPN on Raspberry Pi?

This article covers the way you set up a VPN connection on a RaspberryPI, not the way you install a VPN server on your Raspberry PI device. If you are interested in using your device as a VPN server here are some useful article:

• How to install a PPTP VPN server on a Raspberry Pi
• How to set up an L2TP/IPsec VPN with SoftEther VPN on a Raspberry Pi

Configure OpenVPN

This tutorial will show you how you can set up a VPN secure connection from your Raspberry PI using OpenVPN, assuming that you run Raspbian O/S on it. Before you begin, you need to get an OpenVPN config file from your VPN provider (if you don’t have a subscription yet, take a look at the bottom of the article).

STEP 1. Get your current package list updated:

sudo apt-get update

STEP 2. Install the OpenVPN package:

sudo apt-get install openvpn

STEP 3. Download the OpenVPN config files and then copy them to the pi (via scp or FTP), then unzip them into /etc/openvpn

sudo mv ####_linux.tar.gz /etc/openvpn

sudo tar -xf ####_linux.tar.gz

cd /etc/openvpn

STEP 4. Make the script executable

sudo chmod +x /etc/openvpn/update-resolv-conf

STEP 5. Use the following command to get connected (replace config file – ovpn file – with one of the VPN server you want to connect to). Depending on the config files, you may be asked for the credentials (username/password).

sudo openvpn –daemon –cd /etc/openvpn –config openvpn_config_file.ovpn

STEP 6. To disconnect run:

killall -9 openvpn

Raspberry PI VPN providers

To set up a Raspberry PI VPN connection, you need an active subscription to a VPN service (if you don’t have a VPN server of your own). Most of the top VPN providers offer access to OpenVPN server configs that you may use with the above set of instructions. Some of them also expose batch files that can be quickly executed. Take a look below at the recommended VPN services to be used on your RaspberryPI and their RaspberryPI VPN tutorials.

After you set up the VPN, don’t forget to check your visible IP address on XMyIP or other IP locator website.

Conclusion

To sum up, you may set up a VPN connection on your Raspberry PI without much hassle. You may go either with OpenVPN step-by-step setup or use the following the tutorials of the above-listed VPN providers. Enjoy!

Did you set up your Rasberry PI VPN? What do you use it for? Let us know your thoughts in the comments below.

If you are leaving in the US or UK and you travel abroad you may face some problems when trying to access some sites you usually do from your home. There are a lot of sites that are accessible only to US/UK users. As a US/UK citizen, you may not be aware of this, but when you travel abroad you realize that you simply are not able to access sites like Hulu, Pandora, Veoh, Spotify, BBC iPlayer, etc. Learn how to build your own VPN network.

The solution: bypass the restrictions from your current location. You may do this by:

• Using a hide IP tool that changes your IP address to a United States or United Kingdom IP.
• Subscribing to a VPN service that provides access to a US/UK server
• Connecting to your home computer via VPN and access the Internet as you were home. The elegant, safe, and cheap solution as you don’t have to pay anything. So let’s see how this can be done.

How to build your own VPN network

So you want to create a VPN network of your own? Well, here are a few facts and guidelines to help you out either way.

First, the basics. VPN or Virtual Private Network is a network that is constructed by using public wires to connect nodes. This type of network provides secure and remote access to another enterprise network. If you make a VPN connection of your own, this enterprise network would be yours.

The ownership of the network will be public, but since security-wise, private considerations are prioritized, this type of network provides a safe and secure connection. You will be able to access your own computer from anywhere on the internet like as if you were on your own network.

You can create your own Virtual Private Network using a number of systems and software, some of which will be discussed here. One of the most popularly used methods is via Hamachi (aka LogMeIn) setup. I will show how to set up Hamachi on your home computer and then how to access it from a remote location.

How to set up Hamachi/LogMeIn on your home computer

Here are the steps you need to perform:

1. Go to https://secure.logmein.com/US/products/free/
2. Click on Download button (Download PC version or Download Mac version)
3. Create a user account. You need to provide an email address and a password.
4. Activate your account from your email. A link is sent to you by email. Just click on it and your account is activated.
5. Log in to your account.
6. Click on Add this computer
7. Download and install LogMeIn. Click on the Install LogMeIn button.
   
8. You may get a security warning. Just click Run.
9. The process of the installation of this software started. Press Next and accept the terms. Next, choose the typical installation.
10. Choose a description for your home computer
11. In order to be able to access the computer anytime make sure the following options is checked. (It may not be shown for you!)
12. Choose the installation folder. You can keep it on C:\Program Files\LogMeIn. Click Next.
13. LogMeIn service will be then installed. You may experience some flickering and black screens. Don’t worry! It’s normal.
14. After the setup is finished, you are done!

How to access your home computer from a remote location

One the installation is done, you login back to the LogMeIn website, you will see your computer with the description.

When you need to access your home computer from a remote location you need to login to your LogMeIn account and click on Remote Control below your computer description.

You will be redirected to a page where you will be required to click ‘Install ActiveX Control…’ from the dropdown. Then click ‘Install’ when the security warning pops up.

Voila! Your new VPN is ready!

In the browser, you will be required to enter your Windows username and password (the credentials you are using to log in to your home computer).

Then, you will be able to control your home computer. In order to access restricted sites like Hulu or BBC iPlayer you just need to open a browser and get started as you were home.

What do you think about this method of accessing restricted content? Is it effective? Have you used it?

JanusVM requires VMware Player or Server to run, and it was designed to be used on Microsoft Windows (2000/XP/2003) and Linux. It’s great that it also works on Linux!

JanusVM main features

Here are some additional features of JanusVM:

• Works with WiFi.
• Support multiple users on a LAN.
• Protects you from most man-in-the-middle attacks.
• Protects your identity and your exact location by masking your IP Address.
• Encrypts and re-routes your DNS request and ALL TCP traffic to ensure strong privacy.
• Strips out most privacy-sensitive information your web browser may leak.
• Blocks popups, annoying ads, banners, and other obnoxious Internet junk.
• Very simple setup and operation.
• Works transparently for applications using TCP. (No UDP or ICMP support

The setup is very easy. Just download and install VMWare player, then download JanusVM. Once you have the VM player installed, then you can open it and load the JanusVM application (a .vmx file). Then JanusVM sets up Tor and Privoxy.

The next step is to enter into the Run window the path JanusVM will give you. It should look something similar to \\10.0.2.15\Setup\Run.bat

Of course, the IP shown to you may be different. An icon will appear on your desktop called “JanusVM VPN” after the run.bat file finishes running, then Janus will give you a set of choices.

1. Show IP information
2. Configure IP information
3. Configure Anonymity + Privacy
4. Shutdown/Reboot
5. Check For Updates
6. Help
7. Quit

You should first choose “Configure Anonymity + Privacy.” Janus will give you a list of privacy configuration, pick the one that says “Anonymous.” Janus will restart TOR and Privoxy and then your set.

How does it work?

JanusVM is powered by VMware, built on the Linux 2.6.14 kernel, and brings together OpenVPN, Squid, Privoxy, and Tor, to give you a transparent layer of security and privacy that is compatible with all your TCP based applications.

If you like JanusVM and decide to keep it running on your computer, you may consider giving a small donation to the developer.

JanusPA: Tor Hardware Privacy Adapter

The Janus team has published a preview of their JanusPA, plug-n-play, hardware Privacy Adapter. After four months of work, they are almost ready to release this interesting adapter.

In the next few weeks, they will work on the documentation, software requirements, staging the built environment, compiling the code, etc. and then JanusPA will be ready to hit the market. I am curious how much it will cost.

What is JanusPA?

JanusPA is a small router that anonymizes all your traffic via the Tor network.

How to make it work?

Steps to make it functional:

1. Connect the adapter to your PC or network switch
2. Next, connect the adapter to your Cable/DSL modem or router
3. Connect the power to the adapter and wait for about 60 seconds.

The result: everything that passes through this adapter is going through the Tor network or your VPN tunnel. So, your real IP will never be shown, regardless of the application you are using!

OpenVPN

OpenVPN uses the OpenSSL library to provide encryption of both the data and control channels. It lets OpenSSL do all the encryption and authentication work. Thus, it allows OpenVPN to use all the ciphers available in the OpenSSL package. It’s a little more challenging to set up that PPTP but with the right tutorials an average computer user should not encounter any problems.

What is an OpenVPN VPN provider?

OpenVPN VPN providers use the OpenVPN protocol to connect users to VPN servers. Every provider uses its configurations to set up the connections, depending on the desired level of encryption.

How do the VPN providers integrate OpenVPN?

There are two ways OpenVPN can be integrated. The first one by using the OpenVPN user interface and predefined configuration files provided by the VPN service. Thus, when you subscribe to such a VPN service, you need to download some .opvn files that will be used by the OpenVPN UI to connect to the desired servers. The advantage of this approach is that you may use several VPN services from the same interface and connect to a large variety of servers.

The second approach is to integrate the OpenVPN connection library in custom build apps. Thus, you don’t need to install OpenVPN yourself. It will be done silently by the app installer. The advantage offered by such apps is that you may switch between different VPN protocols (for example from OpenVPN to PPTP, L2TP or SSTP).

My recommendation is to go for the second type of providers if you are a regular VPN user and you plan to use one service at a time. However, for users with special needs (lots of locations and IPs), the OpenVPN UI can be a more straightforward alternative.

List of OpenVPN VPN providers

Finally, here is the list of several OpenVPN based VPN services (alphabetically ordered):