[netheril96]

To get around GFW, use openconnect instead. That is as or more secure than OpenVPN, and not current filtered.

[vetinari]

> That is as or more secure than OpenVPN

How does it achieve that? They both use TLS, in both, you can pick your ciphers.

Additionaly, they both use OpenSSL, which is often found buggy and the ciphers are not hw accelerated.

[zurn]

OpenVPN uses its own non-TLS UDP protocol to carry traffic (with an optional TCP fallback), and only uses TLS for connection setup. ref: https://wiki.wireshark.org/OpenVPN

[netheril96]

OpenVPN does not support many of the more secure ciphers in TLS, while openconnect does.