Greentunnel is not just a DoH client. Greentunnel also breaks up your packets in such a manner that prevents SNI sniffing, which is what makes it able to prevent blocking by Jio.
Re:Investigating TLS Blocking in India
by ignoramous on Monday September 28, 2020 @04:36AM
(#24614376)
> Greentunnel also breaks up your packets in such a manner that prevents SNI sniffing...
Yep, here's the code that does the trick: https://github.com/SadeghHayeri/GreenTunnel/blob/master/src/...
Re:Investigating TLS Blocking in India
by inshadows on Monday September 28, 2020 @08:12AM
(#24615741)
Hmmm... No thanks.
"dependencies": {
"app-data-folder": "^1.0.0",
"chalk": "^2.4.2",
"clear": "^0.1.0",
"consola": "^2.11.0",
"debug": "^4.1.1",
"dns-over-http": "^0.1.2",
"dns-over-tls": "0.0.6",
"esm": "^3.2.22",
"is-docker": "^2.0.0",
"lru-cache": "^5.1.1",
"node-localstorage": "^2.1.5",
"ora": "^3.2.0",
"std-env": "^2.2.1",
"universal-analytics": "^0.4.20",
"update-notifier": "^2.5.0",
"validator": "^10.11.0",
"winreg": "^1.2.4",
"yargs": "^13.2.2"
},
Re:Investigating TLS Blocking in India
by Santosh83 on Monday September 28, 2020 @02:59AM
(#24613720)
Is something like greentunnel necessary. I'm in India and I've found that Firefox with its builtin DoH connection to Cloudflare seems to bypass all govt blocks I've personally come across. Haven't tested specifically for this though... just normal browsing experience.
Try using your setup to access a blocked website on a Jio connection. You'll find why greentunnel is required :)
Re:Investigating TLS Blocking in India
by justDankin on Monday September 28, 2020 @03:32AM
(#24613963)
DoH just by itself won't help unfortunately, since it just fetches the DNS (btw, only Airtel, ACT, BSNL, and MTNL bother with DNS censorship).
ISPs have been looking at the cleartext hostname in the TLS handshake to block these connections
As someone correctly pointed out, greentunnel does much more than DoH.
Re:Investigating TLS Blocking in India
by Santosh83 on Monday September 28, 2020 @04:34AM
(#24614361)
Thanks to everyone in this subthread. I'm on BSNL which I find is one of the Indian ISPs that seems to implement easy to circumvent blocks (DNS based), so far. Reliance no doubt is a different beast with its financial and technical clout and increasing market share. Rather concerning that we're quickly catching up to China in terms of implementing an increasingly sophisticated firewall.
Seriously can't expect the average Joe to know about stuff like greentunnel. And that's concerning...
I use greentunnel and it works fine.