Re: [Openvpn-users] Question about tls-crypt and port 443 firewall ducking

[Steffan K. <st...@ka...>]

Hi,

On 20-12-16 18:01, Selva Nair wrote:
> Someone here had posted that making the VPN connection through stunnel
> works better from china. 

Exactly.  To reliably bypass good DPI, it is not sufficient to hide that
traffic is (Open)VPN traffic, but instead you'll need to make it look
like allowed traffic.  Tunneling over stunnel (which is 'plain' TLS, so
looks very similar to HTTPS) does a decent job there.

But the advice here remains unchanged:  if you want to bypass DPI, use a
tool that is designed to do just that, such as obfsproxy.

-Steffan