Size and timing of packets. Protocols generally have consistent patterns, so say always 6 packets with the last 3/4ths filled. Then some keepalive at regular intervals (i.e. tracker updates), establising new peer connections, …
Luckily this deep inspection is illegal for isps in the eu.
Russia, China, and Iran are using the patterns to effectively block all normal VPN and proxy protocols. There, people need special tools that send fake packets, randomize timing, and split and group packets into different sizes. All of course decreasing speed and increasing latency.
For UDP you’d also usually reencode packets as http3 warp ones so it looks like a video call.
Then the other end needs the same tooling to restore the normal packets.
Obfuscating it would be possible if necessary, but it’s better when you aren’t forced to maintain such an obfuscation stack.
Obfuscating it would be possible if necessary, but it’s better when you aren’t forced to maintain such an obfuscation stack.
I’d be delighted if my VPN provider provided even an obfuscation layer that I could use on my routers, but alas…
For UDP you’d also usually reencode packets as http3 warp ones so it looks like a video call. Then the other end needs the same tooling to restore the normal packets.
Is this similar to when you mask it as webrtc?
Luckily this deep inspection is illegal for isps in the eu.
As per the GDPR or something else?
There, people need special tools that send fake packets, randomize timing, and split and group packets into different sizes. All of course decreasing speed and increasing latency.
Size and timing of packets. Protocols generally have consistent patterns, so say always 6 packets with the last 3/4ths filled. Then some keepalive at regular intervals (i.e. tracker updates), establising new peer connections, …
Luckily this deep inspection is illegal for isps in the eu.
Russia, China, and Iran are using the patterns to effectively block all normal VPN and proxy protocols. There, people need special tools that send fake packets, randomize timing, and split and group packets into different sizes. All of course decreasing speed and increasing latency.
For UDP you’d also usually reencode packets as http3 warp ones so it looks like a video call.
Then the other end needs the same tooling to restore the normal packets.
Obfuscating it would be possible if necessary, but it’s better when you aren’t forced to maintain such an obfuscation stack.
Luckily one of the most populated police states in Europe didn’t trick idiots into voting to leave the EU or anything…oh wait.
Said state was already a surveilance nightmare (even more so the digital kind) well before that as shown in the Snowden Revelations.
Cries in tea :'(
I’d be delighted if my VPN provider provided even an obfuscation layer that I could use on my routers, but alas…
Is this similar to when you mask it as webrtc?
As per the GDPR or something else?
Something other than DAITA?
https://github.com/HyNetworks/hysteria