Access US Only Websites from Outside the USA with a SOCKS Proxy & SSH Tunnel
A wide variety of websites and online services are region restricted to the USA: Hulu, Netflix, Pandora, annual credit reports, some banks, the list is significant. Region restrictions are generally something you don’t notice until you need to access a website from outside the USA, and then they’re a huge pain. We’ll show you how to get around region restrictions securely by using a SOCKS proxy and SSH tunnel.
Before getting started, you’ll need the following to set up a socks proxy for this purpose:
- A US-based web hosting or shell provider that allows SSH access, including a username and the remote machines IP
- Basic understanding and comfort with the command line
This walkthrough is aimed at Mac OS X, but you should be able to configure things much the same with iOS, Android, and Windows too.
How to Set up an SSH Tunnel and SOCKS Proxy in Mac OS X
Assuming you have a US host squared away, let’s begin:
- Go to the Applications folder, then to Utilities, then launch the Terminal and use the following syntax to set up the SOCKS proxy:
- For example, if your username is AJ and the remote host IP is 220.127.116.11, and you want to setup a proxy on port 2012, the syntax would be:
- Login as usual and maintain the shell connection for as long as you intend to use the proxy, if you’re concerned about remote host timeouts just ping localhost or another ip
- Now go to the Apple menu and open “System Preferences”
- Click on “Network” and then click on “Advanced” in the lower right corner
- Click on the “Proxies” tab and click the checkbox next to “SOCKS Proxy” from the protocol menu
- Fill in the SOCKS Proxy server as 127.0.0.1 and provide the port from earlier, in this case 2012
- Click “OK”
ssh -D port_number user@remote_host_ip
ssh -D 2012 AJ@18.104.22.168
Now launch a web browser and double-check the external IP address of the Mac to confirm with a website like whatismyip.org, or by running the following at the command line:
curl ipecho.net/plain ; echo
You can also use whatismyip, which seems to change their service but sometimes works:
Your IP should now register as the remote US-based host you tunneling through, and you are free to view US region restricted content. If you aren’t sure what the IP region registers as, do an nslookup on it like this:
nslookup (ip address)
Using one of the localizer services on the web can work too, they get a rough location based upon ip address detected and that can also determine if you’re actually using the proxy or not.
Side note: in some cases, specifically with websites that redirect based on region, you just need to find the proper URL and you don’t need to tunnel at all. A very useful example is stopping Google.com redirecting to another region by using their NCR site, but there are other search engines and websites that have similar alternate URLs.