v2ray + openvpn to unblock gfw and netflix

v2ray_openvpn_netflix.md

If you're using wireguard please refer to v2ray+wireguard to bypass GFW and netflix/spotify/hulu

Two things need to be paid

• vps(such as bandwagonhost)
  • If you are using China Telecom, a CN2 network is required, or you may get stuck when streaming video
  • For bandwagonhost, you need to login, click Client Area -> Services -> Order New Services to get CN2 server
• vpn vendor to unblock netflix(a openvpn connection that can unblock netflix)

The basic idea is setup a socks5 proxy to forawrd all network traffic from the socks5 to a specific openvpn, in v2ray, forward all the netflix traffic to the socks5 proxy

Why not connect to the openvpn directly ?

The openvpn connection is highly unstable or slow due to GFW

Why not connect to VPS directly ?

You can easily get a fast VPS(CN2) from various provider, but most of them can't combined the fast and stable connection from China && unblock from the netflix

So, I decide to do it myself

Steps

1. install v2ray

   bash <(curl -s -L https://git.io/v2ray.sh)
   

2. config openvpn connection inside a docker container

In most case the following command can't set up properly, please read the Notice part to change the configuration if there's something wrong

    git clone https://github.com/zpoint/openvpn_socks5_docker.git
    cd openvpn_socks5_docker
    ./build.sh
    ./start.sh
    launch *.ovpn

3. exit the docker container, change your v2ray configure file to forward the netflix traffic to the openvpn connection inside the container, this is part of my configure file located in /etc/v2ray/config.json

   "inbounds": [
    {
     "port": 8888,
     "protocol": "vmess",
     "settings": {
      "clients": [
       {
        // private config
       }
      ]
     },
     "streamSettings": {
      "network": "ws"
     },
     "sniffing": {
      "enabled": true,
      "destOverride": [
       "http",
       "tls"
      ]
     }
    }
   ]
   
   
   "outbounds": [
    {
     "protocol": "socks",
     "settings": {
      "servers": [{
       "port": 9050,
       "address": "localhost"
      }]
     },
     "streamSettings": {
      "tcpSettings": {
       "header": {
        "type": "none"
       }
      },
      "network": "tcp",
      "security": "none"
     },
     "tag": "streaming"
    }
   ]
   
   "routing": {
    "domainStrategy": "IPOnDemand",
    "rules": [
        {
      "type": "field",
      "domain": [
       "domain:btstatic.com",
       "domain:netflix.com",
       "domain:netflix.net",
       "domain:nflxext.com",
       "domain:nflximg.com",
       "domain:nflximg.net",
       "domain:nflxsearch.net",
       "domain:nflxso.net",
       "domain:nflxvideo.net",
       "domain:ipaddress.com"
      ],
      "outboundTag": "streaming"
     }
    ]
   }
   

I believe v2ray already supports the use of trojan (https://github.com/v2fly/v2ray-core/tree/master/proxy/trojan), so you can still follow the original guide on this gist, but use trojan instead of vmess protocol on the inbound config block for your server. And on your client v2ray, use trojan on the outbound config. https://www.v2fly.org/en_US/v5/config/proxy/trojan.html

thank you so much^^

@zpoint @ackl @mehdi198080

Hi,
I tried to test, OK. no problem.
curl --socks5 [::1]:9050

But, I seem to having an issue with the v2ray config
help me !

Here is my v2ray conf

---

`

{
"log" : {
"access": "/var/log/v2ray/access.log",
"error": "/var/log/v2ray/error.log",
"loglevel": "warning"
},

"inbound": {
"port": 20478,
"protocol": "vmess",
"settings": {
"clients": [
{
"id": "2ccbe244-96e4-4ae1-b761-3d86666f6a93",
"encryption": "aes-128-gcm",
"level": 1,
"alterId": 64
}
]
},
"streamSettings": {
"network": "ws"
},
"sniffing": {
"enabled": true,
"destOverride": [
"http",
"tls"
]
}
},

"outbound": [
{
"protocol": "socks",
"settings": {
"servers": [{
"port": 9050,
"address": "localhost"
}]
},
"streamSettings": {
"tcpSettings": {
"header": {
"type": "none"
}
},
"network": "tcp",
"security": "none"
},
"tag": "streaming"
}
],

"routing": {
"domainStrategy": "IPOnDemand",
"rules": [
{
"type": "field",
"domain": [
"domain:btstatic.com",
"domain:netflix.com",
"domain:netflix.net",
"domain:nflxext.com",
"domain:nflximg.com",
"domain:nflximg.net",
"domain:nflxsearch.net",
"domain:nflxso.net",
"domain:nflxvideo.net",
"domain:ipaddress.com"
],
"outboundTag": "streaming"
}
]
}
}

`

redirect-gateway def1

hey there I'm having the same problem but I don't know how to check for the redirect-gateway def1 option in my OpenVPN config can you help me with this?

@oops10101 You just need to open the ,ovpn config file and try CTRL-F for the string 'redirect-gateway def1'

Oh I see I did that that but line wasn't present in my file but unfortunately my problem persists. Thank you for answering

…

On Sat, Aug 17, 2024, 2:10 AM Andrew Low ***@***.***> wrote: ***@***.**** commented on this gist. ------------------------------ @oops10101 <https://github.com/oops10101> You just need to open the ,ovpn config file and try CTRL-F for the string 'redirect-gateway def1' — Reply to this email directly, view it on GitHub <https://gist.github.com/zpoint/df2483c6beb97816e34ddbde3f62f5d8#gistcomment-5156912> or unsubscribe <https://github.com/notifications/unsubscribe-auth/BJEKZRTV7MIGM4J2GI72GNLZRZ5WXBFKMF2HI4TJMJ2XIZLTSKBKK5TBNR2WLJDUOJ2WLJDOMFWWLO3UNBZGKYLEL5YGC4TUNFRWS4DBNZ2F6YLDORUXM2LUPGBKK5TBNR2WLJDHNFZXJJDOMFWWLK3UNBZGKYLEL52HS4DFVRZXKYTKMVRXIX3UPFYGLK2HNFZXIQ3PNVWWK3TUUZ2G64DJMNZZDAVEOR4XAZNEM5UXG5FFOZQWY5LFVEYTAMBQGYYDANJZU52HE2LHM5SXFJTDOJSWC5DF> . You are receiving this email because you were mentioned. Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub> .