3 ms·
> TCP-level fragmentation for first data packet && TCP-level fragmentation for persistent (keep-alive) HTTP sessions > I'd be interested to see which national
by tgragnato 7y ago
> TCP-level fragmentation for first data packet && TCP-level fragmentation for persistent (keep-alive) HTTP sessions
> I'd be interested to see which national DPI solutions (GFW, Russia) this successfully circumvents
The GFW seems to do TCP stream reassembly. I don't think this will work in China.
- ValdikSS 7y agoINTANG should work https://github.com/seclab-ucr/INTANG https://github.com/seclab-ucr/INTANG I have plans to implement INTANG methods in GoodbyeDPI, but it requires some architectural changes first. Modern DPIs in Russia also perform stream reassembly or at least have proper state machine, so they can't be circumvented that easily anymore, unfortunately.