notthebee / ansible-easy-vpn

An Ansible playbook that sets up a Wireguard server with ad blocking, DNS-over-HTTPS, and a WebUI with 2FA
Other
1.07k stars 259 forks source link

Add SOCKS5 as an alternative to Wireguard to mask VPN traffic #145

Open xu-chris opened 1 year ago

xu-chris commented 1 year ago

Is your feature request related to a problem? Please describe. The repository installation works like a charm. However, in countries with strict VPN rules (you know which), the very unique gets analyzed and detected and the connection to the server gets quickly prohibited when using the Wireguard protocol. Turns out that governments applying those policies with newly generated VPN servers don't lock out the IP address but the usage of the protocol, resulting in devices able to connect to the servers but only VPN traffic gets lost 100%.

Describe the solution you'd like To overcome such Great Firewalls, the SOCKS5 is a handy protocol masking traffic with other protocols, simply overruling the package scans made by governments. The SOCKS5 server acts as a proxy receiving all the traffic, like a VPN server. But it's practically hidden 🥸. So instead of using Wireguard, you're using SOCKS5.

Additional context Shadowsocks seems like a good candidate for this. Some folks have created Docker containers with their library implementation.

Check some Youtube talks to this:

antonw-25 commented 1 year ago

Thats really cool! Wonder if its possible to have socks run on top of wireguard?

notthebee commented 1 year ago

Unfortunately, I can't give any ETAs, but the feature is being worked on

antonw-25 commented 1 year ago

https://github.com/openwrt/packages/pull/19974 found this, is it possible to implement this myself on ansible (i dont know much)

antonw-25 commented 1 year ago

Hi! Any updates?

ajeshbs commented 1 year ago

Expecting an update soon

notthebee commented 1 year ago

You can accelerate the process by forking the repository, developing the feature and submitting a pull request 😁