3 ms·

For anyone in India, just use a DoH client and you would be good to go. I use greentunnel and it works fine.

Santosh83 6y ago
Is something like greentunnel necessary. I'm in India and I've found that Firefox with its builtin DoH connection to Cloudflare seems to bypass all govt blocks I've personally come across. Haven't tested specifically for this though... just normal browsing experience.
- bgdam 6y ago
  Try using your setup to access a blocked website on a Jio connection. You'll find why greentunnel is required :)
bgdam 6y ago
Greentunnel is not just a DoH client. Greentunnel also breaks up your packets in such a manner that prevents SNI sniffing, which is what makes it able to prevent blocking by Jio.
- ignoramous 6y ago
  > Greentunnel also breaks up your packets in such a manner that prevents SNI sniffing... Yep, here's the code that does the trick: https://github.com/SadeghHayeri/GreenTunnel/blob/master/src/handlers/https.js#L45-L56 https://github.com/SadeghHayeri/GreenTunnel/blob/master/src/...
  - inshadows 6y ago
    Hmmm... No thanks. "dependencies": { "app-data-folder": "^1.0.0", "chalk": "^2.4.2", "clear": "^0.1.0", "consola": "^2.11.0", "debug": "^4.1.1", "dns-over-http": "^0.1.2", "dns-over-tls": "0.0.6", "esm": "^3.2.22", "is-docker": "^2.0.0", "lru-cache": "^5.1.1", "node-localstorage": "^2.1.5", "ora": "^3.2.0", "std-env": "^2.2.1", "universal-analytics": "^0.4.20", "update-notifier": "^2.5.0", "validator": "^10.11.0", "winreg": "^1.2.4", "yargs": "^13.2.2" },
justDankin 6y ago
DoH just by itself won't help unfortunately, since it just fetches the DNS (btw, only Airtel, ACT, BSNL, and MTNL bother with DNS censorship). ISPs have been looking at the cleartext hostname in the TLS handshake to block these connections As someone correctly pointed out, greentunnel does much more than DoH.
- Santosh83 6y ago
  Thanks to everyone in this subthread. I'm on BSNL which I find is one of the Indian ISPs that seems to implement easy to circumvent blocks (DNS based), so far. Reliance no doubt is a different beast with its financial and technical clout and increasing market share. Rather concerning that we're quickly catching up to China in terms of implementing an increasingly sophisticated firewall. Seriously can't expect the average Joe to know about stuff like greentunnel. And that's concerning...

Is something like greentunnel necessary. I'm in India and I've found that Firefox with its builtin DoH connection to Cloudflare seems to bypass all govt blocks I've personally come across. Haven't tested specifically for this though... just normal browsing experience.

bgdam 6y ago
Try using your setup to access a blocked website on a Jio connection. You'll find why greentunnel is required :)

bgdam 6y ago

Greentunnel is not just a DoH client. Greentunnel also breaks up your packets in such a manner that prevents SNI sniffing, which is what makes it able to prevent blocking by Jio.

ignoramous 6y ago
> Greentunnel also breaks up your packets in such a manner that prevents SNI sniffing... Yep, here's the code that does the trick: https://github.com/SadeghHayeri/GreenTunnel/blob/master/src/handlers/https.js#L45-L56 https://github.com/SadeghHayeri/GreenTunnel/blob/master/src/...
- inshadows 6y ago
  Hmmm... No thanks. "dependencies": { "app-data-folder": "^1.0.0", "chalk": "^2.4.2", "clear": "^0.1.0", "consola": "^2.11.0", "debug": "^4.1.1", "dns-over-http": "^0.1.2", "dns-over-tls": "0.0.6", "esm": "^3.2.22", "is-docker": "^2.0.0", "lru-cache": "^5.1.1", "node-localstorage": "^2.1.5", "ora": "^3.2.0", "std-env": "^2.2.1", "universal-analytics": "^0.4.20", "update-notifier": "^2.5.0", "validator": "^10.11.0", "winreg": "^1.2.4", "yargs": "^13.2.2" },

justDankin 6y ago

DoH just by itself won't help unfortunately, since it just fetches the DNS (btw, only Airtel, ACT, BSNL, and MTNL bother with DNS censorship). ISPs have been looking at the cleartext hostname in the TLS handshake to block these connections As someone correctly pointed out, greentunnel does much more than DoH.

Santosh83 6y ago
Thanks to everyone in this subthread. I'm on BSNL which I find is one of the Indian ISPs that seems to implement easy to circumvent blocks (DNS based), so far. Reliance no doubt is a different beast with its financial and technical clout and increasing market share. Rather concerning that we're quickly catching up to China in terms of implementing an increasingly sophisticated firewall. Seriously can't expect the average Joe to know about stuff like greentunnel. And that's concerning...