The Computer Oracle

OpenVPN vs. SOCKS proxy

--------------------------------------------------
Rise to the top 3% as a developer or hire one of them at Toptal: https://topt.al/25cXVn
--------------------------------------------------

Music by Eric Matyas
https://www.soundimage.org
Track title: Puzzling Curiosities

--

Chapters
00:00 Openvpn Vs. Socks Proxy
00:38 Accepted Answer Score 15
01:53 Thank you

--

Full question
https://superuser.com/questions/423603/o...

--

Content licensed under CC BY-SA
https://meta.stackexchange.com/help/lice...

--

Tags
#ssh #vpn #openvpn #socksproxy

#avk47



ACCEPTED ANSWER

Score 15


The SOCKS tunnel provided by SSH allows forwarding outgoing TCP connections, and nothing else. On the other hand, OpenVPN is a true Layer 2/3 VPN, and as such can transport any kind of IP packets. This makes it useful for almost all kinds of networked applications, including those using UDP. It also means your computer has an actual IP address, which makes it possible for other hosts to connect to you. You are also not limited to applications with built-in SOCKS support.

Most of the benefits of a true VPN are however not needed for just web browsing; they are of more use when your goal is to e.g. have a permanent secure connection between two private network at different locations.

However, the last bit about not needing SOCKS support in applications is in fact important for web browsing too. While the browser itself will respect the SOCKS server settings, plugins (e.g. Flash) may not. This means that traffic done by plugins may go directly into the Internet.

There are ways to force applications through SOCKS seamlessly (including browser plugins). You can try my tun2socks software, though it does require some effort to set up. If successful, it will make everything go through SOCKS, and you should disable any existing SOCKS configuration in the applications themselves.