Deep Packet Inspection (DPI) and how to avoid it (sh.itjust.works)

submitted 2 months ago by andrew_bidlaw@sh.itjust.works to c/piracy@lemmy.dbzer0.com

10 comments fedilink hide all child comments

Since Russia started to use DPI to block YouTube and other stuff, there arised a couple of solutions to fuck with it. I've come around this repository or, even better, the end of it's page for many cross-platform tools that may let you avoid DPI, and I've used some of them to prove they are working.

https://github.com/ValdikSS/GoodbyeDPI

They don't work for resources that are explicitely banned, it only undoes this one layer of blocking. As Russia didn't block YT (like Twitter) that's enough for that one usecase. It's no private VPN or something, but it may become useful in the future.

you are viewing a single comment's thread
view the rest of the comments

[-] zaknenou@lemmy.dbzer0.com 3 points 2 months ago

how does this goodbeyDPI exactly work? do you add it to your vpn or what ?

[-] andrew_bidlaw@sh.itjust.works 5 points 2 months ago

Found here: https://goodbyedpi.com/2024/05/27/how-does-goodbyedpi-work/

Packet Fragmentation
Packet fragmentation involves breaking down data packets into smaller fragments. DPI systems often struggle to reassemble these fragmented packets, leading to content inspection and filtering failure. GoodbyeDPI takes advantage of this weakness to bypass censorship.

TCP Window Size Reduction
GoodbyeDPI also uses TCP window size reduction. By reducing the TCP window size, GoodbyeDPI limits the data transmitted in a single packet. This forces DPI systems to handle multiple smaller packets, increasing the likelihood of evading detection.

DNS Spoofing
DNS spoofing is a method where GoodbyeDPI manipulates DNS responses to bypass censorship. By altering DNS responses, GoodbyeDPI can redirect traffic to its intended destination without DPI systems blocking it.

[-] zaknenou@lemmy.dbzer0.com 3 points 2 months ago

DNS Spoofing ? would this help me use internet while pretending that I'm only using facebook ? (which my isp offers for free)

[-] andrew_bidlaw@sh.itjust.works 3 points 2 months ago* (last edited 2 months ago)

It'd probably make it harder to deny some packets on ISP's side if they block specifilc thiings like torrents. To mask this traffic under the one sent to Facebook, I guess it should be a bit more specialized.