[subscribed]

Could you please drop names/links to the magic sauce if there's anything more than the names mentioned?

I need to open ssh myself and for now I decided on tunnelling over http/3 terminated somewhere in aws/gcp/cf, but maybe your method is better.

[dfadsadsf]

Just use Amnezia VPN - it can masquerade as https.

[subscribed]

I can't, my endpoint runs software enforcing compliance. "no disallowed VPN software" is one of the rules.

Besides, where's fun in it :)

[denkmoon]

https://github.com/XTLS/Xray-core

It won't help you get around the endpoint compliance software, I use this for my byod phone (Streisand is a nice ios client). VLESS is the proxy protocol, kinda like SOCKS I guess. It uses xhttp over TLS as the transport.

[subscribed]

Thanks a lot. VPNs are forbidden but this might easily slip under the radar (I can even check the signatures on the endpoint protection and our office firewall :))

It's less about breaking the rules, more about getting around the limitations in case I need it and don't fancy waiting 2 days for approval. Might end up with pure http/3, but this tool is fascinating. Thanks!