Re:Ask HN: The government of my country blocked VPN access. ...
by ykl on Thursday August 28, 2025 @07:33PM
(#45058221)
Give it a try if you want; it doesn't work. For TLS traffic they track what the connection looks like over time; a TLS connection for normal web traffic versus a VPN connection tunneling through TLS apparently look different enough that they can detect and cut it off.
Re:Ask HN: The government of my country blocked VPN access. ...
by moduspol on Thursday August 28, 2025 @10:28PM
(#45059397)
Worth noting is that OpenVPN’s TCP TLS mode does not work that way. It’s essentially the UDP protocol messages except wrapped into TCP. The initial handshake is not a normal TLS client hello.
Not sure about other SSL VPNs.
Really? Because the paper you linked says they don't block any TLS connections so you can just run a VPN over TLS:
> TLS connections start with a TLS Client Hello message, and the first three bytes of this message cause the GFW to exempt the connection from blocking.