Huawei’s Ace in the Hole: Undersea Cables

Re:Huawei’s Ace in the Hole: Undersea Cables by walrus01 on Tuesday May 28, 2019 @01:48PM (#20032530)

One of the things you will see is that a VPN will work for a while.

Then it will stop.

Even though they may not be able to break the crypto, it's not hard from a DPI (deep packet inspection) and netflow analysis perspective to see that an IP in China has a high volume of encrypted traffic to/from a single /32 in the US/Europe, and then blackhole that.

The GFW has automated null routing/traffic blackholing functions in place for this.

[ Parent | on HN ]

Re:Huawei’s Ace in the Hole: Undersea Cables by mikorym on Tuesday May 28, 2019 @04:21PM (#20033981)

Are there currently any (CLI) tools that route traffic through multiple IPs (I mean not tOR)?

For example, multiple SSH tunnels through something like sshuttle where you try to give the impression that you are not threading all your traffic through one "hole".

[ Parent | on HN ]

Re:Huawei’s Ace in the Hole: Undersea Cables by A2017U1 on Tuesday May 28, 2019 @08:53PM (#20035920)

Not aware of any measure like that but shadowsocks is the one obfuscation method that has been able to bypass the GFW in China for a long time now.

Always impressed that it still manages to work.

[ Parent | on HN ]