Home - sjtug/kxsw GitHub Wiki
Get Through the Firewall in Scientific Method
English is more proper for such kind of information, so Chinese written before is deprecated. Any supplements would be welcome. :)
With so many methods to cross the wall, here we only discuss some efficient and novel methods.
oagentG was widely used in Mainland China, but it has been severely interfered by wall since June 2014. At the same time, lots of VPNs are interfered and cannot work properly.
You can refer 科学上网的最佳实践 for best practice.
Proxy
shadowsocks(socks5) is recommended. You should buy your own VPS to serve shadowsocks for privacy.
Shadowsocks(socks5)
- Shadowsocks is an efficient way to cross the wall.
- shadowsocks-libev takes few CPU and memory, which is the most suitable for low-end system such as Raspberry PI.
- shadowsocks-go is a go port of shadowsocks, whose protocol is compatible with the original shadowsocks.
v2ray(socks5 + HTTP)
An universal proxy solution supporting multiple protocols including shadowsocks, VMess(Recommended), socks5 and HTTP.
goproxy(socks5 + HTTP)
- shell909090/goproxy - Yet another proxy.
COW(socks5 + HTTP)
cow, an Swiss Army Knife for simplifying your deployment with proxy. You can use many parent proxies for load balance, which would mitigate the interference by wall. Recommended for university since we should access some scholar database.
- Windows 32 bit - cow-win32-0.9.6.zip
- Windows 64 bit - cow-win64-0.9.6.zip
VPN - (not recommended for newbie)
VPN combined with customized route tables such as chnroutes - Scripts to generate special routes for china ips would be better.
- ShadowVPN 使用说明 · clowwindy/ShadowVPN Wiki
- gohop, an VPN implementation against censorship and intelligent package inspection.
- AnyConnect is developed by Cisco based on its own protocol. Server could be set up with third-party open-source version
ocserv
(On ubuntu or on debian or in docker). Cisco's clients are provided on all platforms and most of them are open-source. If you are skeptical about it OpenConnect could be another choice.
DNS
- clowwindy/ChinaDNS - Recommended!
- DNSCrypt | OpenDNS - not friendly for CDN
Notice: Access Google by modifying hosts is time consuming and inefficient in nowadays.
Access Google via IPV6(hosts) with https do not work now for middle attacks.
toolchain - Cache + Load Balance + HTTP + pure DNS
shadowsocks server(server outside China) <==> haproxy <==> shadowsocks client(server outside China) <==> cow
- [RECOMMENDED]shadowsocks-libev(server and client) + cow(client) + chinadns(pure DNS)
- cow
- squid3+polipo use sock5
- Polipo - Wikipedia
- Polipo — a caching web proxy
- jech/polipo
- HAProxy - Wikipedia
- HAProxy - The Reliable, High Performance TCP/HTTP Load Balancer
- MAC OS X - GoAgentX-v2.3.7.dmg.zip