streisand README

The project's README from github.com/StreisandEffect/streisand. As one markdown file: README.md.

Streisand

Automate the effect

English, Français, 简体中文, Русский | Mirror

Build Status Twitter

Streisand

Silence censorship. Automate the effect.

The Internet can be a little unfair. It's way too easy for ISPs, telecoms, politicians, and corporations to block access to the sites and information that you care about. But breaking through these restrictions is tough. Or is it?

If you have an account with a cloud computing provider, Streisand can set up a new node with many censorship-resistant VPN services nearly automatically. You'll need a little experience with a Unix command-line. (But without Streisand, it could take days for a skilled Unix administrator to configure these services securely!) At the end, you'll have a private website with software and instructions.

Here's what a sample Streisand server looks like.

There's a list of supported cloud providers; experts may be able to use Streisand to install on many other cloud providers.

VPN services

One type of tool that people use to avoid network censorship is a Virtual Private Network (VPN). There are many kinds of VPNs.

Not all network censorship is alike; in some places, it changes from day to day. Streisand provides many different VPN services to try. (You don't have to install them all, though.)

Some Streisand services include add-ons for further censorship and throttling resistance:

See also:

Cloud providers

Other providers

We recommend using one of the above providers. If you are an expert and can set up a fresh Ubuntu 16.04 server elsewhere, there are "localhost" and "existing remote server" installation methods. For more information, see the advanced installation instructions.

Installation

You need command-line access to a Unix system. You can use Linux, BSD, or macOS; on Windows 10, the Windows Subsystem for Linux (WSL) counts as Linux.

Once you're ready, see the full installation instructions.

Things we want to do better

Aside from a good deal of cleanup, we could really use:

We're looking for help with both.

If there is something that you think Streisand should do, or if you find a bug in its documentation or execution, please file a report on the Issue Tracker.

Core Contributors

Acknowledgements

Jason A. Donenfeld deserves a lot of credit for being brave enough to reimagine what a modern VPN should look like and for coming up with something as good as WireGuard. He has our sincere thanks for all of his patient help and high-quality feedback.

We are grateful to Trevor Smith for his massive contributions. He suggested the Gateway approach, provided tons of invaluable feedback, made everything look better, and developed the HTML template that served as the inspiration to take things to the next level before Streisand's public release.

Huge thanks to Paul Wouters of The Libreswan Project for his generous help troubleshooting the L2TP/IPsec setup.

Starcadian's 'Sunset Blood' album was played on repeat approximately 300 times during the first few months of work on the project in early 2014.

streisand (StreisandEffect/streisand)

Searching Database…

23.4K ·GitHub
Streisand
archived
这是干什么用的?Streisand 是一个自动化工具,它会把你在自己选择的云服务商那里的一台服务器,几乎全自动地变成一个私密的、能抵抗审查的 VPN 节点。
那这是我要订阅的 VPN 服务,还是我自己运行的软件?是你自己运行的软件,只需运行一次:Streisand 会在你自己的云账号下开通一台私人服务器,所以你不用向 VPN 公司注册,也不用和陌生人共用节点。
我怎么用它把服务器搭起来?在 Unix 命令行下运行:Linux、BSD 或 macOS 都行,Windows 10 的 WSL 也算 Linux。你需要有受支持的云服务商的账号,然后按照代码仓库里的完整安装说明操作。
它支持哪些云服务商?开箱即用的有:Amazon Web Services、Microsoft Azure、DigitalOcean、Google Compute Engine、Linode 和 Rackspace。懂行的人也可以通过 'localhost' 或 'existing remote server' 方式,直接用一台全新的 Ubuntu 16.04 服务器。
它能装哪些 VPN 服务?我是不是必须全装?可以任选:WireGuard、OpenConnect(Cisco AnyConnect)、OpenSSH、OpenVPN、Shadowsocks、sslh、Stunnel,或者一个私有的 Tor 桥。它们都装在同一个节点上,而且不必全部安装。
为什么不直接租一台 VPS 自己手动搭 VPN?当然可以,但 README 里说,即使是熟练的 Unix 管理员,要安全地配置这些服务也可能要花好几天。Streisand 只需运行一次,就能把整套安全配置全部自动化完成。
在花时间用它之前,有什么我该知道的吗?这个 GitHub 仓库已经归档,不再维护了。作者还把更容易的安装方式、更快地采用新的抗审查工具列为未完成的目标,而且专家备用方案默认的是老旧的 Ubuntu 16.04。
如果我的网络会主动限速或追查 VPN 流量怎么办?有几个服务自带规避插件:Shadowsocks 配有 V2ray-plugin,在充满敌意的网络上(尤其是做 QoS 限速的网络)能稳健地隐藏流量;Tor 桥还可以加上 Obfsproxy 的 obfs4 来伪装自己。
为什么它提供这么多协议,而不是只用一个好用的?因为审查因地点和时间而异——README 里提到它可能天天都在变。一台服务器上装了多个服务,即使某个协议被封或被限速,你还有别的可以退而求其次。
运行完之后我实际能得到什么?一个 HTML 文件:一个私人网站,里面有每个已安装服务的客户端软件和专门的使用说明,方便分享给朋友、家人和一起行动的伙伴。
为什么这些服务里 WireGuard 被特别提出来?README 称它是一个现代化的高性能协议,致谢部分也写到,WireGuard 的作者 Jason A. Donenfeld 重新定义了现代 VPN 该是什么样子。
What are similar projects?algo, openvpn-install, mlmvpn_android, 3X-UI_KIT, fq-book, SoftEtherVPN, mtproto.zig, amnezia-client
Which topics is it in?dpi-bypass, openvpn, tor, vpn-server, ansible, censorship, ubuntu, wireguard, vps, shadowsocks, tunnel, anti-censorship
Creator
StreisandEffect
Size
4 MB
Stars
23.4K
Updated
CommitApr 12
Age
12y
Commits · 90 Days