Random Padding To Hide OpenVPN Protocol

jiquera

Hi I'm working frequently from china and I need to access to my home network. I was thinking of using OpenVPN but since the notorious Great Firewall of China is in the way... is it possible to mask the TLS traffic a bit better with the standard configuration? I see that 2.4 will support control channel encryption which will help I suppose. But as I understand GFW uses packet length analysis as well to recognize TLS handshakes

So is it possible?

cheers

jiq

TinCanTech

Something like this:
https://community.openvpn.net/openvpn/wiki/TrafficObfuscation

jiquera

yeah i was trying to avoid tunneling through a tunnel, but thanks for the link, it seems easy enough to implement.

webber

[quote="jiquera"]yeah i was trying to avoid tunneling through a tunnel, but thanks for the link, it seems easy enough to implement.[/quote]

Did you have any luck with this? I always found that my servers would work from China in the beginning but then get blocked after a few weeks, even with obfuscation. In the end, I just started using some commercial VPN services which seem to stay unblocked somehow (the exit IPs never change either). The first one I tried was PureVPN, speed was terrible, but it was kind of stable in terms of not getting blocked. I'm now using the top 2 recommendations from the tipsforchina.com [url=https://www.tipsforchina.com/best-vpn-for-china.html]best VPN for China[/url] page (ExpressVPN and VPN.ac). They are both fast and work quite well.

Lindaawilsoon

webber wrote
jiquera wroteyeah i was trying to avoid tunneling through a tunnel, but thanks for the link, it seems easy enough to implement.
Did you have any luck with this? I always found that my servers would work from China in the beginning but then get blocked after a few weeks, even with obfuscation. In the end, I just started using some commercial VPN services which seem to stay unblocked somehow (the exit IPs never change either). The first one I tried was PureVPN, speed was terrible, but it was kind of stable in terms of not getting blocked. I'm now using the top 2 recommendations from https://www.bestvpn.co/best-vpn-for-china/ page (ExpressVPN and VPN.ac). They are both fast and work quite well.

Well these two recommendations are helpful to me, Thanks