I love sshuttle. You can point it at any ssh server (that has python installed on it) and you don't need any special privileges on the remote end.<p>One problem is that it does <i>not</i> support DNS tunneling if FreeBSD is your client.[1]<p>Item: we (rsync.net) would be <i>willing to pay</i> for development that gets sshuttle to work properly and bulletproof on FreeBSD. In fact, we would be willing to pay for sshuttle development in general. Email us.[2]<p>Also, what is up with this new fork ... which speaks from the original authors point of view and, in fact, has his own personal notes cut and pasted into the README. In fact, the contact information is the original author - Avery Pennarun apenwarr@gmail.com - what's going on here ?<p>[1] No, the note about IPFIREWALL_FORWARD does not fix this problem.<p>[2] info@rsync.net
You can also just use a SSH to set up a socks proxy as well.<p><a href="http://blog.jpatrick.io/tube-socks/" rel="nofollow">http://blog.jpatrick.io/tube-socks/</a>
Just use Shadowsocks, unless you're on iOS, in which case use PPTP. These both work reliably for me, and with the latest versions of OSX.<p>If you need something more resistant to DPI, check out stunnel or obfsproxy as carriers for OpenVPN. Switch ports regularly as well. You needn't change server config to do this: just use iptables to forward stuff so your server's stunnel daemon is listening on hundreds of ports.
If you want a poorer VPN, you can use socat [1] or n2n[2], which both works great!<p>1: <a href="http://www.dest-unreach.org/socat/doc/socat-tun.html" rel="nofollow">http://www.dest-unreach.org/socat/doc/socat-tun.html</a><p>2: <a href="https://en.wikipedia.org/wiki/N2n" rel="nofollow">https://en.wikipedia.org/wiki/N2n</a>
I used this for a while in summer while I travelled to China, it worked shortly before the powerful GFW blocks it deadly, along with openvpn-over-443-port etc that I tried, which also failed soon after it's used for a short while.
Why not just use OpenVPN? It's just as simple (if not simpler) to setup and considerably more powerful.<p>An OpenVPN server can go from zero to done in under 5 minutes (for HN readers, less) with a Docker container: <a href="https://github.com/kylemanna/github" rel="nofollow">https://github.com/kylemanna/github</a>