Outline VPN
Outline VPN is a free and open-source tool that deploys Shadowsocks servers on multiple cloud service providers.[1][2] The software suite also includes client software for multiple platforms. Outline was developed by Jigsaw, a technology incubator created by Google.[3]
Developer(s) | Jigsaw |
---|---|
Initial release | March 20, 2018 |
Repository | github |
Written in | TypeScript, Java, Bash, Objective C, Swift |
Operating system | |
Available in | English |
License | Apache License 2.0 |
Website | Official website |
The Outline Server supports self-hosting, as well as cloud service providers including DigitalOcean, Rackspace, Google Cloud Platform, and Amazon EC2.[3] Installation involves running a command on its command line interface, or in the case of installing on DigitalOcean, its graphical user interface.
Components
Outline has three main components:[4]
- The Outline Server acts as a proxy and relays connections between the client and the sites they want to access. It is based on Shadowsocks, and offers a REST API for management of the server by the Outline Manager application.
- The Outline Manager is a graphical application used to deploy and manage access to Outline Servers. It supports Windows, macOS and Linux.
- The Outline Client connects to the internet via the Outline Server. It supports Windows, macOS, Linux, Chrome OS, Android, and iOS.
Security and privacy
Outline uses the Shadowsocks protocol for communication between the client and server. Traffic is encrypted with the IETF ChaCha20 stream cipher (256-bit key)[5] and authenticated with the IETF Poly1305 authenticator.[6]
Outline is free and open-source, licensed under the Apache License 2.0, and was audited by Radically Open Security and claims[7][8] not to log users’ web traffic. The Outline Server supports unattended upgrades.
Outline is not an anonymity tool, and it doesn't provide the same degree of anonymity protections as Tor, which routes traffic through three hops rather than just one and also protects against attacks like browser fingerprinting.
Critical reception
In March 2018, Max Eddy of PCMag stated that a preview version of Outline VPN was "startlingly easy to use" and "removes privacy concerns associated with VPN companies". However, Eddy criticized the software for not encrypting all traffic on Windows, and warned users that "individual use may lack some anonymity compared [to] large VPN companies".[9]
Since version 1.2, the Outline Windows client came out of 'Beta', effectively beginning to encrypt all traffic from the device, in par with the Outline clients for macOS, Chrome OS, Android, and iOS.
References
- Greenberg, Andy (2018-03-20). "Alphabet's 'Outline' Software Lets Anyone Run a Homebrew VPN". Wired. Retrieved 2018-09-11.
- Dillet, Romain (2018-03-22). "Alphabet's Outline lets you build your own VPN". TechCrunch. Retrieved 2018-09-11.
- Ghoshal, Abhimanyu (2018-03-21). "Alphabet's Outline lets you run your own self-hosted VPN for free". The Next Web. Retrieved 2018-07-02.
- "Jigsaw". GitHub. Retrieved 2018-06-29.
- Tung, Liam. "Google parent's free DIY VPN: Alphabet's Outline keeps out web snoops | ZDNet". ZDNet. Retrieved 2018-07-02.
- "Outline Server source code". github.com. Retrieved 2018-09-11.
- "Outline VPN - Making it safer to break the news". getoutline.org. Retrieved 2018-06-29.
- "Penetration Test Report for Jigsaw LLC" (PDF). Radically Open Security B.V. 2018-03-11. Retrieved 2018-09-11.
- Eddy, Max (2018-03-27). "Alphabet Outline VPN". PCMag. Retrieved 2018-09-11.