Anonymity ShadowSocks vs VPN.

[Fixxx]

If you have ever taken interest in the Great Firewall of China you have probably heard of Shadowsocks. It's often mistaken for a VPN-based technology but while some of the functions overlap, Shadowsocks and VPN are completely different things! So this article will help you understand the different aspects of this two technologies.

What is Shadowsocks?​

An open-source SOCKS5-based proxy project, Shadowsocks is an intermediary that is mainly designed to bypass censorship. It was first released in 2012 by it's creator, a Chinese programmer under the pseudonym “clowwindy”. In 2015, the programmer announced that they were retiring from the project due to pressure from the police. Since then Shadowsocks has remained open source, maintained and improved by many collaborators.

How is Shadowsocks Different from VPN?​

There is one major similarity between VPN and Shadowsocks - their ability to connect you to certain websites that are normally off-limits due to government censorship, geoblocks or otherwise. Given it's original objective of bypassing the Great Firewall of China, Shadowsocks focuses on circumventing traffic restrictions. It utilizes HTTPS, thus disguising traffic so that it can move past the censorship measures in place.

Unlike VPN, Shadowsocks isn’t designed for privacy and anonymity. While both VPN and Shadowsocks encrypt data, Shadowsocks is much more lightweight. VPN uses many layers of military-grade encryption protocols to completely hide the traffic on it's servers. Shadowsocks makes data "blank" to look more like HTTPS traffic, so that it can move around unrestricted. It's not hidden like on VPN, just disguised.

Due to it's use of SOCKS5 proxies, Shadowsocks doesn’t send all your traffic through a server, as opposed to VPN. And in contrast to traditional ssh SOCKS5 proxies, Shadowsocks works with multiple TCP connections. The result is much faster speeds compared to the alternatives.

Benefits of Shadowsocks.​

The biggest advantage of Shadowsocks is it's easy setup. The technology is a simple and capable proxy that doesn’t take long to set up and is perfect for accessing restricted content. Shadowsocks is also completely open source with contributors making improvements regularly.

Another benefit of Shadowsocks is it's selective disguising of traffic. You can choose which part of your traffic is affected by Shadowsocks - this makes it possible to access restricted content both inside and outside of your location. Take the following scenario for example: you are in China and you want to access Gmail. By using Shadowsocks you can choose the Gmail traffic to be "camouflaged" thus bypassing the Chinese government’s block. Regardless of this, it's possible to access websites that are specifically designed for China. Conversely, employing a VPN means that all data heading to your chosen server is encrypted, leading to the scenario where sites exclusive to China become unreachable on the same device.

Last but not least, Shadowsocks is very difficult to detect and block. The masking of traffic to make it appear as HTTPS is the main reason for that. Conversely, the operational method of VPNs and their widespread use has allowed governments and platforms to easily block this technology or compel large companies to eliminate VPN products from their offerings. A case in point is Apple's removal of VPN apps from App Store in China.

Understanding the Threat Model.​

While Shadowsocks is a great technology for bypassing content restrictions, it's functionality beyond that is limited. As such, this superproxy is a viable option only if it fits a certain threat model - your ISP. What is a threat model? Simply put, it's the reason you are looking for a VPN, VPS or DNS proxy in the first place. There are many aspects of the Internet that may demand a higher level of security - examples of threat models are public Wi-Fi hotspots, ISP-related issues such as data monitoring and logging, keeping your online identity hidden, etc.

Shadowsocks doesn't enhance your online privacy or security. It should only be used if bypassing censorship is your primary objective. Shadowsocks doesn't cope with other threat models. One could argue that it wasn’t designed for such functionality - and they'd be right: this is where VPN outshines Shadowsocks.

When is VPN the Better Choice?​

When compared to Shadowsocks, VPN is the "mainstream" technology. It’s widespread and its effectiveness is well-documented and indisputable. If you are looking for something that will protect your identity online while fully erasing your digital footprint, VPN is your go-to tool. It goes without saying that not every VPN out there is perfect - the sheer number of providers is proof enough that there are both solid and lackluster VPN services on the market. Nevertheless, by conducting thorough research, you can guarantee that you make an informed decision.

While VPN blocks still exist (and we don’t see them going away in the near future), there are multiple providers out there who have proven that they will continue to find ways to give users around the world what they want, whether it’s access to geographically-limited platforms such as Netflix, HBO, BBC or a workaround for government censorships in countries like China and Russia.

Conlusion.​

Shadowsocks is a great way of bypassing digital censorship. It was created in a country where this is a rather big issue, but today it has expanded globally thanks to it's open-source nature and ease of use. If safeguarding your identity and maintaining online anonymity are priorities for you - VPN is more appropriate choice.