net4people / bbs

Forum for discussing Internet censorship circumvention
3.19k stars 75 forks source link

Assistance Needed to Bypass Restrictions on Irancell Network #368

Open hichgram opened 1 month ago

hichgram commented 1 month ago

Hello,

I used to purchase VPS, install a V2Ray panel, and use it without issues. Whenever a VPS stopped working, I would simply switch to a new one. However, over the past one or two months, I have noticed that different configurations I try are no longer working on the Irancell network.

Interestingly, I am still able to SSH into my VPS, but I cannot access the V2Ray panel through a browser. This has left me quite puzzled, and I am not a network specialist, so I am seeking your expertise to regain my access.

Could you please provide me with a step-by-step guide on how to configure my setup to work with Irancell again?

Thank you for your assistance.

Best regards,

Phoenix-999 commented 1 month ago

@hichgram You need to active IPv6 on your VPS server.

Login to Your VPS: Use SSH or your preferred method to log in to your VPS server with administrative privileges. Check Current Configuration: Run the following command to check if IPv6 is already enabled and configured on your server:

ip addr show

Edit Network Configuration: Use a text editor like nano or vi to edit the network configuration file. This file is typically located at /etc/network/interfaces or /etc/sysconfig/network-scripts/ifcfg-. Replace with the name of your network interface (e.g., eth0).

sudo nano /etc/network/interfaces

Configure IPv6 Settings: Add the following lines to the network configuration file to configure your IPv6 settings. Replace with your assigned IPv6 address and with your IPv6 gateway address provided by your VPS provider.

iface eth0 inet6 static
address <ipv6_address>
netmask 64
gateway <ipv6_gateway>

Restart Networking Service: After making changes, restart the networking service to apply the new configuration.

sudo systemctl restart networking

Verify Configuration: Verify that IPv6 is now enabled and configured correctly by running:

ip -6 addr show

Test IPv6 Connectivity: Test your IPv6 connectivity by pinging an IPv6-enabled website or using the ping6 command. For example:

ping6 ipv6.google.com

Now that all the steps above have been completed correctly, you should know your VPS IPv6, which should resemble something like this: 2001:0db8:85a3:0000:0000:8a2e:0370:7334

Next, go to your client application, such as V2RAYNG, and update the VPN configuration that you already have. Change the address from IPv4 or your subdomain to your IPv6. That should do the trick and work on Irancell ISP.

Please note that IPv6 won't work on some of the ISPs in Iran, such as MCI, so only use it on the ISPs that support IPv6.

hichgram commented 1 month ago

Thank you so much; you have no idea how much you've helped me! However, I'm now facing an issue with MCI. My ping is too high, making it nearly unusable. Could you advise me on what I can do to improve my MCI connection?

wkrp commented 1 month ago

@Phoenix-999 why does activating an IPv6 address for the VPS have an effect? Is this something specific to the V2Ray control panel, or is it that there is a blocking rule that blocks the panel that exists with IPv4 but not IPv6?

Phoenix-999 commented 1 month ago

Thank you so much; you have no idea how much you've helped me! However, I'm now facing an issue with MCI. My ping is too high, making it nearly unusable. Could you advise me on what I can do to improve my MCI connection?

You are very welcome. Regarding MCI, unfortunately, everyone is facing the same issue with disordered connections and downgraded speed. It's largely up to the Clean IP and whitelisted domains and protocols you're using to connect to the free internet. Some protocols work better than others, and depending on how you set up your server and what application you use, it might help a little bit.

Basically, you need to choose between security and speed! Some protocols like SSH or direct and plain Vless+TCP or Vless+GRPC work better with MCI ISPs, but they are really vulnerable to GFW detection and can be easily blocked.Protocols using CDN, SSL certificates, or SNI might be a bit more secure but won't work as well in terms of speed and stability. or you can use Warp + Link Here

It's important to mention that in the past three weeks, we have witnessed severe disruption in the Iranian network across all ISPs. Some are worse, and some are still working but with minimal speed and stability. For example, reports show that MOKHBERAT or TCI is completely out of reach in most regions and not working with any type of protocol. ASIATECH has surprisingly blocked Cloudflare, causing many problems with websites that use the service. Different ISPs are facing similar problems, with downgraded speeds, mostly with upload speeds under 1 megabyte.

This type of disruption is a new upgrade by the GFW filtering department due to recent news and the situation in the country. So don't worry, it's not just you, everyone is facing similar problems. I'm sure new methods and techniques will soon be introduced to help the public access free internet.

Keep hope and fight the good fight until the end. United we stand, divided we fall.

Phoenix-999 commented 1 month ago

@Phoenix-999 why does activating an IPv6 address for the VPS have an effect? Is this something specific to the V2Ray control panel, or is it that there is a blocking rule that blocks the panel that exists with IPv4 but not IPv6?

Well, from what we understand, this has nothing to do with the type of VPN you're using and is directly related to the local ISP company in Iran. However, I am not sure about Chinese ISPs and whether they use IPv6 or not.

Most internet providers use IPv4, as IPv6 is an older and less commonly offered Internet Protocol Version. However, some ISPs in Iran, such as IRANCELL, still use IPv6 as well as IPv4.

In our experiments, we found a temporary solution: when IPv4 filtering is at its peak and the connection is highly unstable, switching from IPv4 to IPv6 in the client configuration somehow resolves the problem, improving speed and restoring a more stable connection. We believe that some government departments still use IPv6 for their day-to-day connections, which prevents ISPs from completely blocking or downgrading it. Therefore, using IPv6 is a simple trick to bypass speed downgrading.

Of course, if you know your way around the code, you can write the IP table rules or make changes in the X-ray config file so that certain ISPs only use IPv6 and not IPv4. However, that’s another story, which I don't suggest at this point since this simple trick does the job.

Moreover, it's important to mention that, based on our experience over the last year or so, we've learned that whenever the government encounters unusual political situations or faces public unrest, they may completely shut down the internet despite the long-term damage this causes.

These uneducated government tools don't understand the ripple effect caused by such severe actions to cut off people, private businesses, schools, and universities from accessing the free internet.