[girzel]

I bought a Mikrotik a month or two ago, expressly so I could install OpenWRT on it, and use it to get around the Chinese firewall with Shadowsocks. The OpenWRT install never worked, so now I just have a (pretty nice) router, doing what routers are supposed to do. It's long since that OpenVPN didn't work in China, but this should provide a good learning experience, and who knows, maybe it will lead me to something that works.

[netheril96]

To get around GFW, use openconnect instead. That is as or more secure than OpenVPN, and not current filtered.

[vetinari]

> That is as or more secure than OpenVPN

How does it achieve that? They both use TLS, in both, you can pick your ciphers.

Additionaly, they both use OpenSSL, which is often found buggy and the ciphers are not hw accelerated.

[zurn]

OpenVPN uses its own non-TLS UDP protocol to carry traffic (with an optional TCP fallback), and only uses TLS for connection setup. ref: https://wiki.wireshark.org/OpenVPN

[netheril96]

OpenVPN does not support many of the more secure ciphers in TLS, while openconnect does.

[NetStrikeForce]

Apparently SoftEther works really well for that and the developers have a free VPN service called vpngate. Worth a try? :-)

[ddeck]

FWIW I've never had any issues with OpenVPN tunneled over SSH