mirror of
https://github.com/privacyguides/privacyguides.org.git
synced 2024-10-01 01:35:57 -04:00
IVPN announces removal of port forwarding (#2215)
This commit is contained in:
Daniel Gray
parent
794591bbd5
commit
e3beac9e01
@ -197,9 +197,9 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b
|
|||||||
|
|
||||||
<div class="grid cards" markdown>
|
<div class="grid cards" markdown>
|
||||||
|
|
||||||
|
- { .twemoji } [Proton VPN](vpn.md#proton-vpn)
|
||||||
- { .twemoji } [IVPN](vpn.md#ivpn)
|
- { .twemoji } [IVPN](vpn.md#ivpn)
|
||||||
- { .twemoji } [Mullvad](vpn.md#mullvad)
|
- { .twemoji } [Mullvad](vpn.md#mullvad)
|
||||||
- { .twemoji } [Proton VPN](vpn.md#proton-vpn)
|
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
|
|||||||
134
docs/vpn.md
134
docs/vpn.md
@ -10,9 +10,9 @@ If you're looking for additional **privacy** from your ISP, on a public Wi-Fi ne
|
|||||||
|
|
||||||
<div class="grid cards" markdown>
|
<div class="grid cards" markdown>
|
||||||
|
|
||||||
|
- { .twemoji } [Proton VPN](#proton-vpn)
|
||||||
- { .twemoji } [IVPN](#ivpn)
|
- { .twemoji } [IVPN](#ivpn)
|
||||||
- { .twemoji } [Mullvad](#mullvad)
|
- { .twemoji } [Mullvad](#mullvad)
|
||||||
- { .twemoji } [Proton VPN](#proton-vpn)
|
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
@ -32,6 +32,70 @@ If you're looking for additional **privacy** from your ISP, on a public Wi-Fi ne
|
|||||||
|
|
||||||
Our recommended providers use encryption, accept Monero, support WireGuard & OpenVPN, and have a no logging policy. Read our [full list of criteria](#criteria) for more information.
|
Our recommended providers use encryption, accept Monero, support WireGuard & OpenVPN, and have a no logging policy. Read our [full list of criteria](#criteria) for more information.
|
||||||
|
|
||||||
|
### Proton VPN
|
||||||
|
|
||||||
|
!!! recommendation annotate
|
||||||
|
|
||||||
|
{ align=right }
|
||||||
|
|
||||||
|
**Proton VPN** is a strong contender in the VPN space, and they have been in operation since 2016. Proton AG is based in Switzerland and offers a limited free tier, as well as a more featured premium option.
|
||||||
|
|
||||||
|
[:octicons-home-16: Homepage](https://protonvpn.com/){ .md-button .md-button--primary }
|
||||||
|
[:octicons-eye-16:](https://protonvpn.com/privacy-policy){ .card-link title="Privacy Policy" }
|
||||||
|
[:octicons-info-16:](https://protonvpn.com/support/){ .card-link title=Documentation}
|
||||||
|
[:octicons-code-16:](https://github.com/ProtonVPN){ .card-link title="Source Code" }
|
||||||
|
|
||||||
|
??? downloads
|
||||||
|
|
||||||
|
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=ch.protonvpn.android)
|
||||||
|
- [:simple-appstore: App Store](https://apps.apple.com/app/apple-store/id1437005085)
|
||||||
|
- [:simple-github: GitHub](https://github.com/ProtonVPN/android-app/releases)
|
||||||
|
- [:simple-windows11: Windows](https://protonvpn.com/download-windows)
|
||||||
|
- [:simple-linux: Linux](https://protonvpn.com/support/linux-vpn-setup/)
|
||||||
|
|
||||||
|
#### :material-check:{ .pg-green } 67 Countries
|
||||||
|
|
||||||
|
Proton VPN has [servers in 67 countries](https://protonvpn.com/vpn-servers).(1) Picking a VPN provider with a server nearest to you will reduce latency of the network traffic you send. This is because of a shorter route (fewer hops) to the destination.
|
||||||
|
{ .annotate }
|
||||||
|
|
||||||
|
1. Last checked: 2022-09-16
|
||||||
|
|
||||||
|
We also think it's better for the security of the VPN provider's private keys if they use [dedicated servers](https://en.wikipedia.org/wiki/Dedicated_hosting_service), instead of cheaper shared solutions (with other customers) such as [virtual private servers](https://en.wikipedia.org/wiki/Virtual_private_server).
|
||||||
|
|
||||||
|
#### :material-check:{ .pg-green } Independently Audited
|
||||||
|
|
||||||
|
As of January 2020, Proton VPN has undergone an independent audit by SEC Consult. SEC Consult found some medium and low risk vulnerabilities in Proton VPN's Windows, Android, and iOS applications, all of which were "properly fixed" by Proton VPN before the reports were published. None of the issues identified would have provided an attacker remote access to your device or traffic. You can view individual reports for each platform at [protonvpn.com](https://protonvpn.com/blog/open-source/). In April 2022 Proton VPN underwent [another audit](https://protonvpn.com/blog/no-logs-audit/) and the report was [produced by Securitum](https://protonvpn.com/blog/wp-content/uploads/2022/04/securitum-protonvpn-nologs-20220330.pdf). A [letter of attestation](https://proton.me/blog/security-audit-all-proton-apps) was provided for Proton VPN's apps on 9th November 2021 by [Securitum](https://research.securitum.com).
|
||||||
|
|
||||||
|
#### :material-check:{ .pg-green } Open-Source Clients
|
||||||
|
|
||||||
|
Proton VPN provides the source code for their desktop and mobile clients in their [GitHub organization](https://github.com/ProtonVPN).
|
||||||
|
|
||||||
|
#### :material-check:{ .pg-green } Accepts Cash
|
||||||
|
|
||||||
|
Proton VPN, in addition to accepting credit/debit cards, PayPal, and [Bitcoin](advanced/payments.md#other-coins-bitcoin-ethereum-etc), also accepts **cash/local currency** as an anonymous form of payment.
|
||||||
|
|
||||||
|
#### :material-check:{ .pg-green } WireGuard Support
|
||||||
|
|
||||||
|
Proton VPN mostly supports the WireGuard® protocol. [WireGuard](https://www.wireguard.com) is a newer protocol that uses state-of-the-art [cryptography](https://www.wireguard.com/protocol/). Additionally, WireGuard aims to be simpler and more performant.
|
||||||
|
|
||||||
|
Proton VPN [recommends](https://protonvpn.com/blog/wireguard/) the use of WireGuard with their service. On Proton VPN's Windows, macOS, iOS, Android, ChromeOS, and Android TV apps, WireGuard is the default protocol; however, [support](https://protonvpn.com/support/how-to-change-vpn-protocols/) for the protocol is not present in their Linux app.
|
||||||
|
|
||||||
|
#### :material-alert-outline:{ .pg-orange } Remote Port Forwarding
|
||||||
|
|
||||||
|
Proton VPN currently only supports ephemeral remote [port forwarding](https://protonvpn.com/support/port-forwarding/) via NAT-PMP, with 60 second lease times. The Windows app provides an easy to access option for it, while on other operating systems you'll need to run your own [NAT-PMP client](https://protonvpn.com/support/port-forwarding-manual-setup/). Torrent applications often support NAT-PMP natively.
|
||||||
|
|
||||||
|
#### :material-check:{ .pg-green } Mobile Clients
|
||||||
|
|
||||||
|
In addition to providing standard OpenVPN configuration files, Proton VPN has mobile clients for [App Store](https://apps.apple.com/us/app/protonvpn-fast-secure-vpn/id1437005085), [Google Play](https://play.google.com/store/apps/details?id=ch.protonvpn.android&hl=en_US), and [GitHub](https://github.com/ProtonVPN/android-app/releases) allowing for easy connections to their servers.
|
||||||
|
|
||||||
|
#### :material-information-outline:{ .pg-blue } Additional Functionality
|
||||||
|
|
||||||
|
Proton VPN clients support two factor authentication on all platforms except Linux at the moment. Proton VPN has their own servers and datacenters in Switzerland, Iceland and Sweden. They offer adblocking and known malware domains blocking with their DNS service. Additionally, Proton VPN also offers "Tor" servers allowing you to easily connect to onion sites, but we still strongly recommend using [the official Tor Browser](https://www.torproject.org/) for this purpose.
|
||||||
|
|
||||||
|
#### :material-alert-outline:{ .pg-orange } Killswitch feature is broken on Intel-based Macs
|
||||||
|
|
||||||
|
System crashes [may occur](https://protonvpn.com/support/macos-t2-chip-kill-switch/) on Intel-based Macs when using the VPN killswitch. If you require this feature, and you are using a Mac with Intel chipset, you should consider using another VPN service.
|
||||||
|
|
||||||
### IVPN
|
### IVPN
|
||||||
|
|
||||||
!!! recommendation
|
!!! recommendation
|
||||||
@ -81,9 +145,9 @@ IVPN supports the WireGuard® protocol. [WireGuard](https://www.wireguard.com) i
|
|||||||
|
|
||||||
IVPN [recommends](https://www.ivpn.net/wireguard/) the use of WireGuard with their service and, as such, the protocol is the default on all of IVPN's apps. IVPN also offers a WireGuard configuration generator for use with the official WireGuard [apps](https://www.wireguard.com/install/).
|
IVPN [recommends](https://www.ivpn.net/wireguard/) the use of WireGuard with their service and, as such, the protocol is the default on all of IVPN's apps. IVPN also offers a WireGuard configuration generator for use with the official WireGuard [apps](https://www.wireguard.com/install/).
|
||||||
|
|
||||||
#### :material-check:{ .pg-green } Remote Port Forwarding
|
#### :material-alert-outline:{ .pg-orange } Remote Port Forwarding
|
||||||
|
|
||||||
Remote [port forwarding](https://en.wikipedia.org/wiki/Port_forwarding) is possible with a Pro plan. Port forwarding [can be activated](https://www.ivpn.net/knowledgebase/81/How-do-I-activate-port-forwarding.html) via the client area. Port forwarding is only available on IVPN when using WireGuard or OpenVPN protocols and is [disabled on US servers](https://www.ivpn.net/knowledgebase/116/Port-forwarding-is-not-working-why.html).
|
IVPN previously supported port forwarding, but removed the option in [June 2023](https://www.ivpn.net/blog/gradual-removal-of-port-forwarding). Missing this feature could negatively impact certain applications, especially peer-to-peer applications like torrent clients.
|
||||||
|
|
||||||
#### :material-check:{ .pg-green } Mobile Clients
|
#### :material-check:{ .pg-green } Mobile Clients
|
||||||
|
|
||||||
@ -167,70 +231,6 @@ Mullvad has published [App Store](https://apps.apple.com/app/mullvad-vpn/id14884
|
|||||||
|
|
||||||
Mullvad is very transparent about which nodes they [own or rent](https://mullvad.net/en/servers/). They use [ShadowSocks](https://shadowsocks.org/) in their ShadowSocks + OpenVPN configuration, making them more resistant against firewalls with [Deep Packet Inspection](https://en.wikipedia.org/wiki/Deep_packet_inspection) trying to block VPNs. Supposedly, [China has to use a different method to block ShadowSocks servers](https://github.com/net4people/bbs/issues/22). Mullvad's website is also accessible via Tor at [o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion](http://o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion).
|
Mullvad is very transparent about which nodes they [own or rent](https://mullvad.net/en/servers/). They use [ShadowSocks](https://shadowsocks.org/) in their ShadowSocks + OpenVPN configuration, making them more resistant against firewalls with [Deep Packet Inspection](https://en.wikipedia.org/wiki/Deep_packet_inspection) trying to block VPNs. Supposedly, [China has to use a different method to block ShadowSocks servers](https://github.com/net4people/bbs/issues/22). Mullvad's website is also accessible via Tor at [o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion](http://o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion).
|
||||||
|
|
||||||
### Proton VPN
|
|
||||||
|
|
||||||
!!! recommendation annotate
|
|
||||||
|
|
||||||
{ align=right }
|
|
||||||
|
|
||||||
**Proton VPN** is a strong contender in the VPN space, and they have been in operation since 2016. Proton AG is based in Switzerland and offers a limited free tier, as well as a more featured premium option.
|
|
||||||
|
|
||||||
[:octicons-home-16: Homepage](https://protonvpn.com/){ .md-button .md-button--primary }
|
|
||||||
[:octicons-eye-16:](https://protonvpn.com/privacy-policy){ .card-link title="Privacy Policy" }
|
|
||||||
[:octicons-info-16:](https://protonvpn.com/support/){ .card-link title=Documentation}
|
|
||||||
[:octicons-code-16:](https://github.com/ProtonVPN){ .card-link title="Source Code" }
|
|
||||||
|
|
||||||
??? downloads
|
|
||||||
|
|
||||||
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=ch.protonvpn.android)
|
|
||||||
- [:simple-appstore: App Store](https://apps.apple.com/app/apple-store/id1437005085)
|
|
||||||
- [:simple-github: GitHub](https://github.com/ProtonVPN/android-app/releases)
|
|
||||||
- [:simple-windows11: Windows](https://protonvpn.com/download-windows)
|
|
||||||
- [:simple-linux: Linux](https://protonvpn.com/support/linux-vpn-setup/)
|
|
||||||
|
|
||||||
#### :material-check:{ .pg-green } 67 Countries
|
|
||||||
|
|
||||||
Proton VPN has [servers in 67 countries](https://protonvpn.com/vpn-servers).(1) Picking a VPN provider with a server nearest to you will reduce latency of the network traffic you send. This is because of a shorter route (fewer hops) to the destination.
|
|
||||||
{ .annotate }
|
|
||||||
|
|
||||||
1. Last checked: 2022-09-16
|
|
||||||
|
|
||||||
We also think it's better for the security of the VPN provider's private keys if they use [dedicated servers](https://en.wikipedia.org/wiki/Dedicated_hosting_service), instead of cheaper shared solutions (with other customers) such as [virtual private servers](https://en.wikipedia.org/wiki/Virtual_private_server).
|
|
||||||
|
|
||||||
#### :material-check:{ .pg-green } Independently Audited
|
|
||||||
|
|
||||||
As of January 2020, Proton VPN has undergone an independent audit by SEC Consult. SEC Consult found some medium and low risk vulnerabilities in Proton VPN's Windows, Android, and iOS applications, all of which were "properly fixed" by Proton VPN before the reports were published. None of the issues identified would have provided an attacker remote access to your device or traffic. You can view individual reports for each platform at [protonvpn.com](https://protonvpn.com/blog/open-source/). In April 2022 Proton VPN underwent [another audit](https://protonvpn.com/blog/no-logs-audit/) and the report was [produced by Securitum](https://protonvpn.com/blog/wp-content/uploads/2022/04/securitum-protonvpn-nologs-20220330.pdf). A [letter of attestation](https://proton.me/blog/security-audit-all-proton-apps) was provided for Proton VPN's apps on 9th November 2021 by [Securitum](https://research.securitum.com).
|
|
||||||
|
|
||||||
#### :material-check:{ .pg-green } Open-Source Clients
|
|
||||||
|
|
||||||
Proton VPN provides the source code for their desktop and mobile clients in their [GitHub organization](https://github.com/ProtonVPN).
|
|
||||||
|
|
||||||
#### :material-check:{ .pg-green } Accepts Cash
|
|
||||||
|
|
||||||
Proton VPN, in addition to accepting credit/debit cards, PayPal, and [Bitcoin](advanced/payments.md#other-coins-bitcoin-ethereum-etc), also accepts **cash/local currency** as an anonymous form of payment.
|
|
||||||
|
|
||||||
#### :material-check:{ .pg-green } WireGuard Support
|
|
||||||
|
|
||||||
Proton VPN mostly supports the WireGuard® protocol. [WireGuard](https://www.wireguard.com) is a newer protocol that uses state-of-the-art [cryptography](https://www.wireguard.com/protocol/). Additionally, WireGuard aims to be simpler and more performant.
|
|
||||||
|
|
||||||
Proton VPN [recommends](https://protonvpn.com/blog/wireguard/) the use of WireGuard with their service. On Proton VPN's Windows, macOS, iOS, Android, ChromeOS, and Android TV apps, WireGuard is the default protocol; however, [support](https://protonvpn.com/support/how-to-change-vpn-protocols/) for the protocol is not present in their Linux app.
|
|
||||||
|
|
||||||
#### :material-alert-outline:{ .pg-orange } Remote Port Forwarding
|
|
||||||
|
|
||||||
Proton VPN currently only supports ephemeral remote [port forwarding](https://protonvpn.com/support/port-forwarding/) via NAT-PMP, with 60 second lease times. The Windows app provides an easy to access option for it, while on other operating systems you'll need to run your own [NAT-PMP client](https://protonvpn.com/support/port-forwarding-manual-setup/). Torrent applications often support NAT-PMP natively.
|
|
||||||
|
|
||||||
#### :material-check:{ .pg-green } Mobile Clients
|
|
||||||
|
|
||||||
In addition to providing standard OpenVPN configuration files, Proton VPN has mobile clients for [App Store](https://apps.apple.com/us/app/protonvpn-fast-secure-vpn/id1437005085), [Google Play](https://play.google.com/store/apps/details?id=ch.protonvpn.android&hl=en_US), and [GitHub](https://github.com/ProtonVPN/android-app/releases) allowing for easy connections to their servers.
|
|
||||||
|
|
||||||
#### :material-information-outline:{ .pg-blue } Additional Functionality
|
|
||||||
|
|
||||||
Proton VPN clients support two factor authentication on all platforms except Linux at the moment. Proton VPN has their own servers and datacenters in Switzerland, Iceland and Sweden. They offer adblocking and known malware domains blocking with their DNS service. Additionally, Proton VPN also offers "Tor" servers allowing you to easily connect to onion sites, but we still strongly recommend using [the official Tor Browser](https://www.torproject.org/) for this purpose.
|
|
||||||
|
|
||||||
#### :material-alert-outline:{ .pg-orange } Killswitch feature is broken on Intel-based Macs
|
|
||||||
|
|
||||||
System crashes [may occur](https://protonvpn.com/support/macos-t2-chip-kill-switch/) on Intel-based Macs when using the VPN killswitch. If you require this feature, and you are using a Mac with Intel chipset, you should consider using another VPN service.
|
|
||||||
|
|
||||||
## Criteria
|
## Criteria
|
||||||
|
|
||||||
!!! danger
|
!!! danger
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user