Re:Swedish ISP Protests ‘Site Blocking’ by Blocking Rightsho...
by stordoff on Saturday November 10, 2018 @11:18PM
(#18425010)
For clarity, the HTTPS were in the clear. Only DNS traffic was over the VPN, to ensure I got an untampered DNS result (and I later verified that hosts files do not help either). You can obviously VPN out, I was just curious how the system was implemented (as the typical advice of change your DNS provider does not help).
Re:Swedish ISP Protests ‘Site Blocking’ by Blocking Rightsho...
by Ayesh on Sunday November 04, 2018 @01:41AM
(#18374454)
OpenVPN runs on HTTPS port, and I suppose it's hard to block without DPI. If the VPN runs on a known port like various other VPN protocols do, it should be trivial to block those connections.
Also I am not even sure it is possible to intercept any traffic over VPN without having the keys, so not sure why tunneling over VPN is a problem , DPI and MITM techniques are not even used by the Chinese government for the most part and people can generally VPN out if they want to.