@
@
@binariti2019-11-06 13:37:09
SSH
@binariti, 2019-11-06 13:37:09

VPN extensions in browsers: how exactly do they work?

I'll start from simple to complex, correct me if I'm wrong, I apologize for the sheet:
1. A normal connection to a site using the http protocol is as follows: the IP address of the specified site is determined and a connection is directly established to the corresponding port at the specified address and through this connection http packets are sent
2. Connection to the site via the http protocol through a proxy occurs as follows: the browser is informed of the IP address of the proxy server, after which the browser itself establishes a connection with this proxy server. Using this connection, the browser asks the proxy server to determine the IP address of the site and exchange http packets with this IP address.
3. Connection to the site via the http protocol via VPN occurs as follows: all network traffic is sent to the vpn connection and routed inside it in accordance with the IP routing rules configured for the client machine and this happens using the OS tools. Although all traffic is encrypted, but with respect to http packets, the same thing happens as in paragraphs 1 and 2, i.e.
a) The VPN server independently establishes a connection with the IP addresses of the specified sites, receives http packets and returns them to the client machine.
b) if a proxy server is defined in the client browser, then inside the VPN connection the browser will redirect packets to the proxy server in the same way, and as a result, the following chain will be obtained for http traffic: browser - VPN server - proxy server - site host server
In the light of the above, it is impossible to do the opposite, i.e. make a vpn connection through the proxy server specified in the browser. However, do VPN browser extensions do this? Those. does the browser connected to the primary proxy somehow establish a VPN connection?
Perhaps something else is happening? Let's say a VPN extension, through a proxy server inscribed in a client browser, establishes a connection with its secondary server, through which it transmits encrypted http traffic (including addresses of target sites), while the secondary server decrypts this traffic, serves it and sends it to the target site host servers , i.e. acts as the second proxy in the chain, while the first proxy considers that regular HTTP traffic passes through it. The chain is as follows: browser - local proxy - browser extension server - target site
But this seems to be called not a VPN connection, but something like SSH tunneling. And why do they call it VPN extensions then?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
R
Ronald McDonald, 2019-11-06
_

Didn't read the thread.
There is no and cannot be any VPN in browsers, this is a regular proxy through which your traffic is chasing. VPN is a completely different technology that was created for completely different purposes, and the browser cannot initiate such a connection in any way, because it is initiated by network equipment.
Fuck marketers in the neck, any "VPN for the browser" is a hoax.

C
CityCat4, 2019-11-07
@CityCat4

Mnogabukaf...
All the so-called "VPN", "anonymizers" and other herizers work on the same principle (and they cannot work differently) - the browser establishes a connection with the herizer (via a local proxy, if any) and sends a request to the herizer "download me this page." The herizer downloads the page and gives it to the browser, it displays it. And that's all :) There is
no full-fledged protection, as in a real VPN. Logging goes on at all levels - at the level of the local proxy (if there is one, it sees that you went to the herizer), at the provider level (the same), at the level of the herizer itself (sees where you went - and you don’t have to say that it’s not there logging - it is impossible to check, so it is).
The task of the herizer is to hide the target URL from the local proxy/provider, and the address from which they came from the destination site.
Does it make sense? No. The very fact of turning to a herizer already hangs a black mark on you, further protection makes sense only if the model of the offender is not the state, but the wife / neighbor - you can protect yourself from them in this way. But even from the employer already - in any way.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question