kravietz 🦇 on Nostr: #Russia Internet legend Filip Kunin reports mass-scale blocking of OpenVPN and ...
#Russia Internet legend Filip Kunin reports mass-scale blocking of OpenVPN and Wireguard using protocol detection which is significant because so far they’ve been blocking using IPs and URLs.
IPS (aka deep packet inspection) detection of OpenVPN is easy, but AFAIR Wireguard has no constant header fields so I’m wondering how they implement that 🤔
Shortly after Kunin posted an update, reporting that mobile operators started “blocking all egress connections from mobile devices and L2TP and PPTP is also blocked”, which is still a bit unclear but could indicate Russian mobile operators started blocking packets to non-Russian IP addresses.
That sounds like a massive overkill, as it would effectively kill all Google or Amazon connections, but on the other hand they could theoretically switch from an block list approach (“allow all, block chosen”) to an allow list approach (“block all, allow chosen”). On the other-other hand even a single AWS or GCP IP could open a bridge for Tor or VPN endpoint, but in any case that results in a solution that is only practically available for privacy nerds.
Source: https://t.me/usher2/2859
#censorship #networking
IPS (aka deep packet inspection) detection of OpenVPN is easy, but AFAIR Wireguard has no constant header fields so I’m wondering how they implement that 🤔
Shortly after Kunin posted an update, reporting that mobile operators started “blocking all egress connections from mobile devices and L2TP and PPTP is also blocked”, which is still a bit unclear but could indicate Russian mobile operators started blocking packets to non-Russian IP addresses.
That sounds like a massive overkill, as it would effectively kill all Google or Amazon connections, but on the other hand they could theoretically switch from an block list approach (“allow all, block chosen”) to an allow list approach (“block all, allow chosen”). On the other-other hand even a single AWS or GCP IP could open a bridge for Tor or VPN endpoint, but in any case that results in a solution that is only practically available for privacy nerds.
Source: https://t.me/usher2/2859
#censorship #networking