4 ms·

>There is already precedent for this happening in Russia; in that incident every VPN pulled out of the country. However if everyone enforces it, it's gonna be h

by kgeist 3y ago

>There is already precedent for this happening in Russia; in that incident every VPN pulled out of the country. However if everyone enforces it, it's gonna be hard. Not only that, ISPs now close all connections which look like VPN traffic. I used to have my own OpenVPN server as a window to the free world and now it doesn't work... I wish there was some kind of open standard which doesn't leave a very obvious signature which is easy to detect by ISPs. I don't know if HTTP CONNECT can be hidden from ISPs? I guess I'm going to try Edge after all.

supriyo-biswas 3y ago
You could look into Shadowsocks, V2Ray and similar. It's also been a while I've read about these topics, so I'm not sure if Russia also does entropy analysis and fingerprinting differences to block these protocols either. You may like reading about the new TSPU system in Russia [1], and discussing your issues on [2]. [1] https://censoredplanet.org/tspu https://censoredplanet.org/tspu [2] http://ntc.party http://ntc.party
_lvbh 3y ago
The Chinese have been fighting this war for a while. The results are in favor of users: see Trojan-gfw, Xray-core, v2ray
gerdesj 3y ago
Try switching to 443/tcp or try a high port like 10000/udp. The first might look rather like streaming over https and the second like an encrypted RTP stream in a mad SIP n RTP session. You can also co-exist OpenVPN on 443/tcp with a "real" web server. The usual use case for that is getting more value out of a single IP address. Put your pony fan club website up or an Ubuntu default webpage. Another possibility is to use port knocking to open ports before the OVPN connects.
- gerdesj 3y ago
  ... and now I come to think of it: PPTP is generally believed to be broken so it might be "allowed" because it will be assumed that grabbing and storing the stream will be sufficient for later analysis. Then you put a OpenVPN inside the PPTP tunnel with proper, modern encryption. ... 53/tcp or udp might be worth trying too. 123/udp - ntp, 25/tcp - email! Basically try being weird - it may well work!

by kgeist 3y ago

supriyo-biswas 3y ago

You could look into Shadowsocks, V2Ray and similar. It's also been a while I've read about these topics, so I'm not sure if Russia also does entropy analysis and fingerprinting differences to block these protocols either. You may like reading about the new TSPU system in Russia [1], and discussing your issues on [2]. [1] https://censoredplanet.org/tspu https://censoredplanet.org/tspu [2] http://ntc.party http://ntc.party

_lvbh 3y ago

The Chinese have been fighting this war for a while. The results are in favor of users: see Trojan-gfw, Xray-core, v2ray

gerdesj 3y ago

Try switching to 443/tcp or try a high port like 10000/udp. The first might look rather like streaming over https and the second like an encrypted RTP stream in a mad SIP n RTP session. You can also co-exist OpenVPN on 443/tcp with a "real" web server. The usual use case for that is getting more value out of a single IP address. Put your pony fan club website up or an Ubuntu default webpage. Another possibility is to use port knocking to open ports before the OVPN connects.

gerdesj 3y ago
... and now I come to think of it: PPTP is generally believed to be broken so it might be "allowed" because it will be assumed that grabbing and storing the stream will be sufficient for later analysis. Then you put a OpenVPN inside the PPTP tunnel with proper, modern encryption. ... 53/tcp or udp might be worth trying too. 123/udp - ntp, 25/tcp - email! Basically try being weird - it may well work!