[asterisk-users] Now OffTopic: VPN As SIP Tunneling?

[Anselm Martin Hoffmeister]

Am Dienstag, den 12.12.2006, 01:32 -0600 schrieb Henry J. Cobb:
> "Luki" <lugosoft at gmail.com> wrote:
> > You
> > don't gain anything QOS-wise by going through a tunnel, except hiding
> > your traffic in case your ISP purposefully assigns lower priority to
> > VoIP traffic and doesn't do it to OpenVPN/GRE/<insert your favorite
> > tunnel protocol> traffic.
> 
> It's a pity that OpenVPN doesn't have an option to hide as https requests
> (and handle the double-TCP problem internally) or even better yet gif
> uploads over http.

It very well has, if you think about getting through a HTTP proxy,
faking a HTTPS session.

It is not uncommon for student appartements internet to be restricted to
HTTP and HTTPS only (and that, through a proxy, CONNECT restricted to
those two ports). If you have OpenVPN running on port 443, TCP, you can
use the proxy options to get a connection.

Has been in use with the U of Edinburgh where a friend of mine "needed"
a phoneline during his Erasmus term. Got a sipgate account for him, and
tunneled asterisk VoIP through OpenVPN... worked like a charm.

Using something like GIF-Upload/Download would require a much deeper
lever of network stack, basically most of a webserver would have to be
setup. It seems unlikely there are enough requests for this sort of
functionality... Unless it is you who starts coding :)

BR
Anselm