#Russia Internet legend Filip Kunin reports mass-scale blocking of OpenVPN and Wireguard using protocol detection which is significant because so far they’ve been blocking using IPs and URLs.
IPS (aka deep packet inspection) detection of OpenVPN is easy, but AFAIR Wireguard has no constant header fields so I’m wondering how they implement that 🤔
Shortly after Kunin posted an update, reporting that mobile operators started “blocking all egress connections from mobile devices and L2TP and PPTP is also blocked”, which is still a bit unclear but could indicate Russian mobile operators started blocking packets to non-Russian IP addresses.
That sounds like a massive overkill, as it would effectively kill all Google or Amazon connections, but on the other hand they could theoretically switch from an block list approach (“allow all, block chosen”) to an allow list approach (“block all, allow chosen”). On the other-other hand even a single AWS or GCP IP could open a bridge for Tor or VPN endpoint, but in any case that results in a solution that is only practically available for privacy nerds.
Source: https://t.me/usher2/2859
#censorship #networking
kravietz 🦇 /
npub1vz…rqdta
2023-08-07 10:23:05
Author Public Key
npub1vz555w0w7pdy3l9skg202lkdnjqll4ct67l25f68x2h84e7u7r4qmrqdtaPublished at
2023-08-07 10:23:05Event JSON
{
"id": "9db107c8df46ffc8fc6ece63d506a1cafea53bd97710f29580c04add8fff4da8",
"pubkey": "60a94a39eef05a48fcb0b214f57ecd9c81ffd70bd7beaa274732ae7ae7dcf0ea",
"created_at": 1691403785,
"kind": 1,
"tags": [
[
"t",
"russia"
],
[
"t",
"censorship"
],
[
"t",
"networking"
],
[
"proxy",
"https://agora.echelon.pl/objects/a0fa33ce-e09c-4636-8a9a-886619f6421f",
"activitypub"
]
],
"content": "#Russia Internet legend Filip Kunin reports mass-scale blocking of OpenVPN and Wireguard using protocol detection which is significant because so far they’ve been blocking using IPs and URLs.\n\nIPS (aka deep packet inspection) detection of OpenVPN is easy, but AFAIR Wireguard has no constant header fields so I’m wondering how they implement that 🤔\n\nShortly after Kunin posted an update, reporting that mobile operators started “blocking all egress connections from mobile devices and L2TP and PPTP is also blocked”, which is still a bit unclear but could indicate Russian mobile operators started blocking packets to non-Russian IP addresses.\n\nThat sounds like a massive overkill, as it would effectively kill all Google or Amazon connections, but on the other hand they could theoretically switch from an block list approach (“allow all, block chosen”) to an allow list approach (“block all, allow chosen”). On the other-other hand even a single AWS or GCP IP could open a bridge for Tor or VPN endpoint, but in any case that results in a solution that is only practically available for privacy nerds.\n\nSource: https://t.me/usher2/2859\n\n#censorship #networking",
"sig": "db1ac3a7249095f4295e56bf5c6cd305969a46ad69b29f76566b14f096584633e7e2319c947de3d65910efe06a50708f6fe7c24e6ab54c8a90f881613f8f3a31"
}