Short version: I strongly do not recommend using any of these providers. You are, of course, free to use whatever you like. My TL;DR advice: Roll your own and use Algo or Streisand. For messaging & voice, use Signal. For increased anonymity, use Tor for desktop (though recognize that doing so may actually put you at greater risk), and Onion Browser for mobile.
This mini-rant came on the heels of an interesting twitter discussion: https://twitter.com/kennwhite/status/591074055018582016
| package main | |
| import ( | |
| "encoding/binary" | |
| "fmt" | |
| "math/rand" | |
| "net" | |
| ) | |
| func main() { |
| func ip2int(ip net.IP) uint32 { | |
| if len(ip) == 16 { | |
| return binary.BigEndian.Uint32(ip[12:16]) | |
| } | |
| return binary.BigEndian.Uint32(ip) | |
| } | |
| func int2ip(nn uint32) net.IP { | |
| ip := make(net.IP, 4) | |
| binary.BigEndian.PutUint32(ip, nn) |
| {"bindings":[],"exchanges":[],"global_parameters":[],"parameters":[],"permissions":[{"configure":".*","read":".*","user":"user6","vhost":"vhost1","write":".*"},{"configure":".*","read":".*","user":"admin2","vhost":"/","write":".*"},{"configure":".*","read":".*","user":"user9","vhost":"vhost3","write":".*"},{"configure":".*","read":".*","user":"user5","vhost":"vhost3","write":".*"},{"configure":".*","read":".*","user":"user1","vhost":"vhost2","write":".*"},{"configure":".*","read":".*","user":"user1","vhost":"vhost1","write":".*"},{"configure":".*","read":".*","user":"admin3","vhost":"/","write":".*"},{"configure":".*","read":".*","user":"user2","vhost":"vhost4","write":".*"},{"configure":".*","read":".*","user":"admin1","vhost":"/","write":".*"},{"configure":".*","read":".*","user":"user7","vhost":"vhost2","write":".*"},{"configure":".*","read":".*","user":"user6","vhost":"vhost4","write":".*"},{"configure":".*","read":".*","user":"user3","vhost":"vhost3","write":".*"},{"configure":".*","read":".*","user":"us |
По мотивам статьи: https://habr.com/ru/post/354282/
Сервер, естественно, должен иметь IP, не входящий в заблокированные РКН подсети. Лучше — стоять вне РФ.
Желательно обеспечить базовый уровень безопасности: https://www.linode.com/docs/security/securing-your-server/
Или заморочиться: https://www.cisecurity.org/cis-benchmarks/
| Download the RKN list from https://github.com/zapret-info/z-i, massage it into | |
| a Mikrotik script that manages a firewall address list, and put it up on a web | |
| server. Note well that the list is gigantic---more than 80,000 entries as of | |
| 2018-04-28---so be sure to check if your router can handle it in advance (for | |
| example, hAP Lite, with its measly 32M of memory, can’t). | |
| On the router side, do something like | |
| /tool fetch url="https://sheaf.site/rkn.rsc" dst-path=rkn.rsc | |
| :import rkn.src |
| groups: | |
| - name: node_exporter_alerts | |
| rules: | |
| - alert: Node down | |
| expr: up{job="monitoring-pi"} == 0 | |
| for: 2m | |
| labels: | |
| severity: warning | |
| annotations: | |
| title: Node {{ $labels.instance }} is down |
| Country,City,Provider,Host,ID | |
| Abkhazia,Sukhum,Aquafon GSM,62.182.8.78:8080,9058 | |
| Abkhazia,Sukhum,"Systema, LTD",cyxym.net:8080,5089 | |
| Abkhaziya,Sukhum,A-Mobile,speedtest.a-mobile.biz:8080,9714 | |
| Afghanistan,Herat,Afghan Wireless,hrtspeedtest.afghan-wireless.com:8080,9622 | |
| Afghanistan,Kabul,Afghan Telecom,sp1.afghantelecom.af:8080,11019 | |
| Afghanistan,Kabul,etisalat Afghanistan,speedtest.etisalat.af:8080,21807 | |
| Afghanistan,Kabul,Afghan Wireless,speedtest.afghan-wireless.com:8080,5189 | |
| Afghanistan,Kabul,Afghan Wireless Communication Company,kdzspeedtest.afghan-wireless.com:8080,13501 | |
| Afghanistan,Kabul,Insta Telecom,speedtest.instatelecom.com:8080,12798 |