VPN - one thing i do not understand

[NoSoupforyou]

I have been reading about VPNs and have used them in the past. Started using one again recently.

I have read how they work. You-->vpn software encrypts data-->VPN server--->Internet

But. In order to GET to the VPN server you still have to connect to your ISP servers. Is this where the "tunnel" comes into play?

That is the one part of a VPN that confused me. The ISP connection.
So if i understand it correctly. You start the VPN software. It then encrypts your data. Opens a "tunnel" through your ISP servers. Then goes to the VPN server?

 

[Rifter]

You understand correctly.

You-->vpn software encrypts data-->VPN server--->Internet

 

[EXCellR8]

This threw me for a loop a while too. When you pay for a VPN service, you are paying to access their VPN servers and are likely instructed to download and install a client on your local machine where you can log in. Once you do so, traffic is encrypted and tunneled through to the VPN server provided by the host's VPN and then it's routed through to your ISP's web server. Once the VPN connection is switched off, the tunnel closes and you are transmitting unencrypted packets directly to your ISP.

 

[Red Squirrel]

That's correct. That way all your ISP sees is a stream of encrypted data to the VPN server. That said, ISPs could easily block VPN servers if they wanted to then you'd have to find another. Your traffic is also going to be clear text once it leaves the VPN server so you still want to pick a VPN that is in a country you trust not to snoop on your data and share it with your government.

The way you pay also is important. Things like credit card etc can easily be traced back to you. You want to find an anonymous way to pay such as a gift card that was bought with cash. You'll want to use TOR to actually sign up for the provider.

 

[mxnerd]

If you are visiting websites that have been issued security certificates then server <-> client communicates via https protocol, then the traffic is encrypted, not clear text, you don't need a VPN connection to get traffic being encrypted.

People wants to use VPN for different reasons
1. Get around country/region restriction.
2. Get illegal files or media contents and don't want to be tracked.
3. Login to working environment or his own home and don't have to worry about traffic being hacked.

Most users who use VPN falls into No.1 & 2.

 

[JackMDS]

Maybe this can Help.

https://www.howtogeek.com/133680/htg-explains-what-is-a-vpn/

 

[killster1]

If you are visiting websites that have been issued security certificates then server <-> client communicates via https protocol, then the traffic is encrypted, not clear text, you don't need a VPN connection to get traffic being encrypted.

People wants to use VPN for different reasons
1. Get around country/region restriction.
2. Get illegal files or media contents and don't want to be tracked.
3. Login to working environment or his own home and don't have to worry about traffic being hacked.

Most users who use VPN falls into No.1 & 2.

I use VpN's on vacation for the hotels wifi.
I guess if you are concern you can use your router to connect to VPN first. I find this easier than making sure everyone on the network has the proper settings to not allow service if VPN is not connected.

 

[NoSoupforyou]

Thanks everyone. From reviews i read i ended up with the 2nd best choice (NordVPN). Mainly because i could get 2yrs of service for the price of 1yr. Been testing various things. I like that it has browser plugins (Firefox and Chrome). Been running tests like, whats my ip, DNS leak test and IPv6 scans.

The browser plug in seems to work well. The nord app in Windows 10 works great. I also have the VPN set up on Solus Linux. If i use the browser plug in it seems fine but if i run the vpn through command prompt. Seems to start and i get the new IP but running DNS leak test shows it is leaking. Still pulls in the IPv6 address (i have turned off IPv6 in the network settings)

Runs well in Linux mint tho. No leaks through browser app or command line.

So far i am happy with the performance of NordVPN. They keep no logs. Are based in Panama. Have tons of servers everywhere. Can pick regular VPN servers or dedicated P2P. Even double VPN. Running speed tests shows speeds to be very good.

 

[killster1]

Thanks everyone. From reviews i read i ended up with the 2nd best choice (NordVPN). Mainly because i could get 2yrs of service for the price of 1yr. Been testing various things. I like that it has browser plugins (Firefox and Chrome). Been running tests like, whats my ip, DNS leak test and IPv6 scans.

The browser plug in seems to work well. The nord app in Windows 10 works great. I also have the VPN set up on Solus Linux. If i use the browser plug in it seems fine but if i run the vpn through command prompt. Seems to start and i get the new IP but running DNS leak test shows it is leaking. Still pulls in the IPv6 address (i have turned off IPv6 in the network settings)

Runs well in Linux mint tho. No leaks through browser app or command line.

So far i am happy with the performance of NordVPN. They keep no logs. Are based in Panama. Have tons of servers everywhere. Can pick regular VPN servers or dedicated P2P. Even double VPN. Running speed tests shows speeds to be very good.

i believe the best servers for p2p are the usa servers past 500. you have to download a list to see, the search for best server app thing doesnt work to well.
At time nordvpn will slow down to a complete stop (this hasnt happened lately hopefully its fixed) it starts again full speed but does have occasional slowdowns. I think the price however is standard.. 30$ a year is what most of the big ones charge. i have PIA and NORD both are about the same price.

 

[Red Squirrel]

VPNs MAY also be effective when ISPs start to implement internet packages in the same way as TV, where premium websites are dialup speed by default unless you pay more. Though it really depends how they set it up. If everything is dialup speed by default then a VPN won't help you, but if say, everything is normal speed except for the premium sites, then you could use the VPN to access those sites.