3 ms·
Hello I’m from Russia. And yes, local authorities started blocking telegram IPs. It doesn’t work without proxy/vpn.
by leo250 8y ago
Hello I’m from Russia. And yes, local authorities started blocking telegram IPs. It doesn’t work without proxy/vpn.
- fehyjn 8y agoTheir DPI is so dumb that it can be easily bypassed just by editing `Host` to `HOst` in http header. BTW ipv6 adresses are not blocked.
- icebraining 8y agoWait, assuming they're using TLS and certificate-pinning, the DPI shouldn't be able to read the HTTP headers at all. How does that work?
- fehyjn 8y agoThat’s right, but basically dpi sends tcp reset in case of https or 302 redirect in case of http before target server response, since it’s located nearer. There’s a tool to bypass this, so you can read more there. https://github.com/ValdikSS/GoodbyeDPI https://github.com/ValdikSS/GoodbyeDPI
- gbil 8y agoIf I'm not mistaken use of SNI reveals the target in plain text, big discussion these days with DNS over TLS etc.
- floatboth 8y agoNot all ISPs even have DPI, small ones just block IPs
- degorov 8y agoIt's not possible to comply with RKN's requirements by banning IPs for quite a long time already.
- degorov 8y agoWhat does that even mean? Every ISP has it's own filtering system, some (or maybe even most of them) are custom built ones. There is no such thing as single government approved DPI.
- foka86 8y agoIn my case, proxy alone doesn't help. It only works with VPN now :(.