VPN or Socks via .onion Address

Support
1

Hi,
is it possible to run a shadowsocks or VPN via an .onion address ?

E.g. on a server is a shadowsocks service running which is reachable via TOR, onion address.

I would add this shadowsocks onion address in whonix workstation, in the shadowsocks client.

Would the Gateway route to the shadowsocks server ?

And would the same work with a VPN service ?

1 Like
2

You can already access the Tor network to circumvent censorship, so what is your use case? These questions would be better asked on the Tor Project Forum:

3

No, you cannot run software to circumvent local internet level (ISP level) censorship inside Whonix-Workstation.

If you cannot reach Tor, you can also not reach onions. And if you cannot reach onions, you cannot connect censorship circumventing software to onions.

How to use shadowsocks for censorship circumvention? Undocumented.

As for VPNs, see:

1 Like
4

The tunnel via SOcks5 or VPN should run via TOR, because then I think 6 hops in tor network are possible !

If you access clearnet websites via the normal workstation, you only have 3 hops !

So basically the workstation would connect via tor network to the .onion Socks5 or .onion VPN Server which then connects to clearnet - 6 hops or actually 7 because you have the server in between.

is that possible ?

1 Like
5

6 hops are already used when connecting to Tor Onion Services:

1 Like
6

yes but please read, I said that when you connect to CLEARNET. then you have 3 hops.
To solve this problem, it should be possible to connect to a socks or vpn via onion (6 hops) which acts as an gateway to the clearnet.

1 Like
7

Which problem?

2 Likes
8

Create a topic on the Tor Project Forum.

1 Like
9

So I just want to connect to a socks server via whonix gateway.
Instead of an IP adress I just put the .onion adress in the socks client, on my debian workstation.

But then it gives me a DNS Error:

socks5 tcp client handler error: dns resolve [...onion] 
error: proto error: no records found for Query { name: Name("[onion....]

So how can it resolve the onion adress of the socks server ?

1 Like
10

You can visit onions using Tor Browser or curl out of the box. No special setup required. nslookup works too.

Why your socks client doesn’t work could be due to using a method of DNS resolving unsupported by Tor. Ask them.

1 Like
11

Thanks @extraextra I can give a nameserver in the socks client.

Which is the nameserver in Tor Browser in Whonix System ?
I mean, the Tor Browser resolves the .onion addresses.

The socks client and Tor Browser both run in a whonix WS via the whonix gateway - Qubes Sytem.

So which nameserver shall I put in the socks client ?

1 Like
12

Tor

127.0.0.1

But I doubt that will help. No setup should be required.

1 Like