Software:Outline VPN
 | |
| Developer(s) | Jigsaw |
|---|---|
| Written in | TypeScript, Go, Java, Swift, Objective C, C++, C# |
| Operating system | |
| Available in | English |
| License | Apache License 2.0 |
Outline VPN is a free and open-source tool that deploys Shadowsocks servers on multiple cloud service providers.[1][2] The software suite also includes client software for multiple platforms. Outline was developed by Jigsaw, a technology incubator created by Google.[3]
The Outline Server supports self-hosting, as well as cloud service providers including DigitalOcean, Rackspace, Google Cloud Platform, and Amazon EC2.[3] Installation involves running a command on its command-line interface, or in the case of installing on DigitalOcean or Google Cloud, its graphical user interface.
Components
Outline has three main components:[4]
- The Outline Server acts as a proxy and relays connections between the client and the sites they want to access. It is based on Shadowsocks, and offers a REST API for management of the server by the Outline Manager application.
- The Outline Manager is a graphical application used to deploy and manage access to Outline Servers. It supports Windows, macOS and Linux.
- The Outline Client connects to the internet via the Outline Server. It supports Windows, macOS, Linux, ChromeOS, Android, and iOS.
Security and privacy
Outline uses the Shadowsocks protocol for communication between the client and server. Traffic is encrypted with the IETF ChaCha20 stream cipher (256-bit key)[5] and authenticated with the IETF Poly1305 authenticator.[6]
Outline is free and open-source, licensed under the Apache License 2.0, and was audited by Radically Open Security and claims[7][8] not to log users' web traffic. The Outline Server supports unattended upgrades.
Outline is not a true VPN solution but rather a Shadowsocks-based proxy. The two technologies are similar in the way they can be used to redirect network traffic and make it appear as originating from another device (the server), and hide the traffic's final destination from observers and filters until it reaches the proxy server. However, a VPN has additional capabilities, such as encapsulating traffic within a virtual tunnel, and allowing connected devices to "see" each other (as if they were connected to a LAN).
Outline is not an anonymity tool, and it does not provide the same degree of anonymity protections as Tor Browser, which routes traffic through three hops rather than just one and also protects against attacks like browser fingerprinting.
Critical reception
In March 2018, Max Eddy of PCMag stated that a preview version of Outline VPN was "startlingly easy to use" and "removes privacy concerns associated with VPN companies". However, Eddy criticized the software for not encrypting all traffic on Windows, and warned users that "individual use may lack some anonymity compared [to] large VPN companies".[9]
Since version 1.2, the Outline Windows client came out of 'Beta', effectively beginning to encrypt all traffic from the device, on par with the Outline clients for macOS, ChromeOS, Android, and iOS.
See also
References
- ↑ Greenberg, Andy (2018-03-20). "Alphabet's 'Outline' Software Lets Anyone Run a Homebrew VPN". Wired. https://www.wired.com/story/alphabet-outline-vpn-software/. Retrieved 2018-09-11.
- ↑ Dillet, Romain (2018-03-22). "Alphabet's Outline lets you build your own VPN". https://techcrunch.com/2018/03/22/alphabets-outline-lets-you-build-your-own-vpn/.
- ↑ Ghoshal, Abhimanyu (2018-03-21). "Alphabet's Outline lets you run your own self-hosted VPN for free" (in en-US). The Next Web. https://thenextweb.com/apps/2018/03/21/alphabets-outline-lets-you-roll-your-own-self-hosted-vpn-for-free/.
- ↑ "Jigsaw" (in en). https://github.com/Jigsaw-Code/?q=Outline.
- ↑ Tung, Liam. "Google parent's free DIY VPN: Alphabet's Outline keeps out web snoops | ZDNet" (in en). ZDNet. https://www.zdnet.com/article/google-parents-free-diy-vpn-alphabets-outline-keeps-out-web-snoops/.
- ↑ "Outline Server source code". https://github.com/Jigsaw-Code/outline-server/blob/efcfc1557bacbc669e9d05722777c3760f5b76f3/src/shadowbox/server/server_access_key.ts#L123.
- ↑ "Outline VPN - Making it safer to break the news" (in en). https://getoutline.org/en/support/dataCollection.
- ↑ "Penetration Test Report for Jigsaw LLC". Radically Open Security B.V.. 2018-03-11. https://s3.amazonaws.com/outline-vpn/static_downloads/ros-report.pdf.
- ↑ Eddy, Max (2018-03-27). "Alphabet Outline VPN". https://www.pcmag.com/review/360063/alphabet-outline-vpn.
External links
 |  |
