1078
Russia starts blocking VPN at the protocol (WireGuard, OpenVPN) level (vpncentral.com)
submitted 3 years ago by to c/technology@lemmy.world
190 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 13 points 3 years ago (1 child)

I don't know what they actually do but one possibly is to look for (absence of) the TLS handshake. Or maybe they simply infect all devices on the Chinese market with MITM certificates to be able to decrypt all TLS encrypted traffic. Should be easy to force companies to do that in such a country.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 29 points 3 years ago (1 child)

    The port isn’t their focus, they’re looking at the protocol that is being used, regardless of the port. The protocol is still visible when not doing deep packet inspection. That’s why there suggesting a socks proxy for Russian citizens, because that uses HTTPS to tunnel traffic, so it wouldn’t be caught up in protocol analysis.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 6 points 3 years ago (1 child)

    can you maybe link some ressources on how the protocol used can be detected? i did not know about this and would like to read into it some more :)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 years ago (1 child)

    Look up NBAR for the basic idea. Each vendor has their own 'secret sauce' implementation, Palo Alto only needs 9 bytes of payload for disambiguation, iirc.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •