-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Jun,
I would try David's obfsproxy + OpenVPN suggestion first and reconsider if that fails. If we would add obfuscation into OpenVPN itself, we'd soon be in the same cat and mouse game as Tor, with the exception we don't have the same amount of developer interest to follow it through. So, I think keeping the obfuscation functionality would be challenging in the long run. - -- Samuli Seppänen Community Manager OpenVPN Technologies, Inc irc freenode net: mattock > Hi David, > > I replied to you directly, maybe it got caught in your spam filter? > > Anyone else has some thoughts about developing an obfsproxy-style > component for OpenVPN? > > Best, > > Jun. > > On 13/02/2012 13:09, David Sommerseth wrote: > > On 13/02/12 13:59, Jun Matsushita wrote: > >> This is my first post in this list. As probably a lot of you > >> heard, Iran has stepped up its filtering by apparently blocking > >> SSL/TLS using DPI. This is a good read about what's happening > >> http://news.ycombinator.com/item?id=3575029. As these statistics > >> from TOR attest > >> https://metrics.torproject.org/users.html?graph=direct-users&start=2012-01-12&end=2012-02-12&country=ir&events=on&dpi=72#direct-users > > >> > > > the impact has been immediate and surely concerns the majority of > > tools > >> out there. > > >> Does OpenVPN allow the use of some form of Obfuscation (such as > >> the one TOR is testing now and seem to work from within Iran > >> https://www.torproject.org/projects/obfsproxy-instructions.html.en)? > > >> Anyone has thoughts about this or would be interested in > >> discussing the matter? > > > > Hi Jun, > > > OpenVPN uses SSL under the hood. But it does some tricks to allow > > SSL over UDP (SSL is strictly designed for TCP). This however > > makes some changes that many DPI firewalls *might* not identify > > OpenVPN traffic as SSL traffic. But as it's not really an > > obfuscation which changes over time, it might still be possible to > > block it if this kind of traffic is detected. > > > However, the obfsproxy project sounds very interesting. And it > > should be possible to use obfsproxy (as it can talk like a SOCKS > > proxy) with OpenVPN, by using the --socks-proxy argument. But I'm > > not aware of any openvpn services providing obfsproxy services in > > conjunction with OpenVPN. > > > > kind regards, > > > David Sommerseth > > ------------------------------------------------------------------------------ > Try before you buy = See our experts in action! > The most comprehensive online learning library for Microsoft developers > is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, > Metro Style Apps, more. Free future releases when you subscribe now! > http://p.sf.net/sfu/learndevnow-dev2 > _______________________________________________ > Openvpn-devel mailing list > Openvpn-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openvpn-devel -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk88/isACgkQwp2X7RmNIqMv1ACfXT8xpTLVNng2RsVSukurCWEt gMQAoNxqob4FGdi60axCsSbz1Q6SVGOH =l436 -----END PGP SIGNATURE-----
