OpenVPN over DNS

DanielR

Hi. Is it possible to establish a connection to my OpenVPN, via DNS protocol instead of HTTP protocol?

This is done by few apps, such as: your-freedom.

This app makes a connection via DNS protocol, using query type AAAA and port 53.

I would like to implement this method and make it work with OpenVPN, for all versions of your client, especially for Windows and Android.

Is this possible?

Thank you for your answers!

TinCanTech

Which version of openvpn do you use on your server ?

DanielR

Access Server version: 2.0.10

The Johan

The OpenVPN Access Server definitely does not have an option to just enable such a thing. Sure you can switch to port TCP/UDP 53, but it won't be DNS traffic and it will easily be discovered as OpenVPN traffic. What you appear to be looking for is obfuscation. To do that you'll need to use some sort of proxy server that accepts traffic locally, any traffic, like OpenVPN traffic, and then obfuscates that, make it look like something else, and sends it on to another such proxy server on the other end, which then passes the traffic out again locally there again. It's possible, I've seen people do it. Definitely not standard procedure though and definitely not something that OpenVPN Technologies will support for the OpenVPN Access Server product.

So short answer: no.

Long answer: yes, with a lot of work, extra software, etc...

DanielR

novaflash wroteThe OpenVPN Access Server definitely does not have an option to just enable such a thing. Sure you can switch to port TCP/UDP 53, but it won't be DNS traffic and it will easily be discovered as OpenVPN traffic. What you appear to be looking for is obfuscation. To do that you'll need to use some sort of proxy server that accepts traffic locally, any traffic, like OpenVPN traffic, and then obfuscates that, make it look like something else, and sends it on to another such proxy server on the other end, which then passes the traffic out again locally there again. It's possible, I've seen people do it. Definitely not standard procedure though and definitely not something that OpenVPN Technologies will support for the OpenVPN Access Server product.

So short answer: no.

Long answer: yes, with a lot of work, extra software, etc...

I perfectly understand. It seems that I will have to use extra software to achieve my goal.

You are very kind and I thank you for taking a few minutes of your time to read and respond to my restlessness!