Hacker News new | ask | show | jobs
by PinguTS 3907 days ago
Exactly, that was my first thought. I have an OpenVPN endpoint on different ports over UDP and TCP available.

My experience is, that UDP is also blocked like TCP. The only possible work around is then IP over DNS, which works but with very very limited bandwidth.
2 comments
noselasd 3907 days ago
On cellular networks, my experience is that everything on port 53 is hijacked and shipped off to a telco DNS server though.
link
fenesiistvan 3907 days ago
> The only possible work around is then IP over DNS

What about tunnel over HTTP? That can be much better obfuscated. Tunnel over DNS can be easily filtered out by just checking for the traffic amount (for example to block VoIP the ISP should just degrade DNS if traffic amount is above a treshold for a user)

link