News for hackers. Stuff that matters.

A comment on GoodbyeDPI: Deep Packet Inspection circumvention utility. Parent comment

Re:GoodbyeDPI: Deep Packet Inspection circumvention utility by laughinghan on Saturday July 23, 2022 @03:35AM (#32201231)
That's what domain fronting is for, and even though the GFW attempts to filter by SNI, genetic algorithms like Geneva are able to find workarounds: https://geneva.cs.umd.edu/papers/foci21.pdf
[ Parent | on HN ]
Re:GoodbyeDPI: Deep Packet Inspection circumvention utility by Avamander on Saturday July 23, 2022 @12:02PM (#32204538)
ESNI/ESH is coming soon, I guess we'll see soon enough how that plays out.
[ Parent | on HN ]
Re:GoodbyeDPI: Deep Packet Inspection circumvention utility by grishka on Saturday July 23, 2022 @12:21PM (#32204733)
Since the project at the OP link is mostly/initially aimed at Russia, in my own experience, it's not always just DPI — it's often DPI combined with a firewall. Roskomnadzor can order to block access to a domain, but then they can also specify an IP or a subnet instead. For example, that's what happened when they tried to block Telegram, which does not use DNS at all.
[ Parent | on HN ]
Re:GoodbyeDPI: Deep Packet Inspection circumvention utility by ignoramous on Saturday July 23, 2022 @06:40AM (#32202103)
IP Fronting too: https://research.cloudflare.com/publications/Fayed2021/
[ Parent | on HN ]