Comments (3)
你好 @crazysvn,
我是一名研究 TLS-in-TLS (在TLS隧道中建立的TLS连接) 的研究员,我所在的团队目前正进行一个项目,以确定这种流量是否以及如何在实际应用中被阻断。我们的合作者已经开发出在检测 TLS-in-TLS 流量的方法,并且我们已经在**境内部署了实验以检测针对 Trojan 的封锁,但收效甚微。
如果您愿意就您了解的具体情况提供一些补充信息,这将对我们的项目有很多帮助。此外,也许我们的一些见解建议可以帮助您和其他社区成员减轻/缓解封锁。下面的这些问题将为我们发掘 GFW 如何检测和封锁这些代理提供非常有价值的信息。如果方便,您也可以直接通过电子邮件与我联系:[email protected]。
- 能否提供 Trojan 的详细配置信息:包括选择的端口以及版本等。
- 能否提供一些流量上的统计信息:每天的连接数、不同 IP 用户总数、传输的数据总量?
- 服务器托管在哪里?您可以提供 ASN 或云服务商的名称。
- 您是否知晓用户正在使用哪种客户端以及这些客户端是怎样配置的?
- 这种阻塞是什么时候开始出现的?端口封锁是否每一天发生在相同时间?
- 如果不是,那么出现阻塞之前是否有任何其他异常?是来自未知 IP 的连接,还是来自某些特定 IP 或客户端的连接?
我们也欢迎您随时通过电子邮件私下与我们取得联系。感谢您的帮助!
Hi @crazysvn,
I am a researcher studying TLS in TLS traffic identification and my group is currently working on a project to determine if and how this traffic is blocked in the wild. Our collaborators have developed methods for detecting TLS in TLS traffic and we have been running experiments within China to detect blocking of trojan with limited success. If you would be willing to provide some additional information about your specific situation it would be incredibly helpful to our project. Additionally, we may be able to offer suggestions to you and the rest of the community on mitigating the blocking. The questions below will provide much needed insight into how GFW is detecting and blocking these proxies. You can also reach out to me directly via email at [email protected].
- Can you provide configuration details of trojan, what ports you have been selecting, version, etc.
- Can you provide any traffic heuristics: number of connections per day, number of unique IPs, amount of data transferred?
- Where was the server being hosted? Either the ASN or the name of the cloud provider.
- Are you aware of the particular clients that users are using and how those have been configured?
- When did you begin to experience this blocking? Are the ports getting blocked at the same time each day?
- If not, are there any anomalies prior to experiencing blocking? Connections from unknown IPs or connections from a specific IP or client?
You are more than welcome to respond privately via email and we can discuss further. Thank you for your help!
from bbs.
Hi, @sippejw . your project sounds really interesting and I think I can help out with some details. Let’s chat more about this? Drop me a message at [address redacted] and we can dive into it.
from bbs.
Hi, @hanshelm02. I have followed up via email from [email protected]. I look forward to hearing from you.
from bbs.
Related Issues (20)
- I have my own VPN application, and I published it in the app markets. What is the difference between LTE and Home internet? HOT 3
- Snowflake, a censorship circumvention system using temporary WebRTC proxies (USENIX Security 2024) HOT 3
- Bleeding Wall: A Hematologic Examination on the Great Firewall (FOCI 2024)
- Assistance Needed to Bypass Restrictions on Irancell Network HOT 5
- VPN blocking in Myanmar since 2024-05-30 reportedly implemented by a Chinese company, Geedge Networks HOT 6
- Is TLS fragment available in China? HOT 1
- Firefox Add-ons blocks access to some proxy extensions from Russia HOT 6
- vmess://
- Is it possible to implement a man-in-the-middle (MITM) tool to bypass censorship? HOT 11
- ss://
- Issues with Trading & Banking Apps and Google Services HOT 6
- Free livestream of FOCI, PETS, and HotPETs, 2024-07-15 to 2024-07-19 HOT 4
- Russia forces Apple to remove dozens of VPN apps from App Store HOT 5
- Turkmenistan:"Internet amnesty? 3 billion IP addresses, hosting and CDNs unblocked" (2024-07-17)
- Looking at the Clouds: Leveraging Pub/Sub Cloud Services for Censorship-Resistant Rendezvous Channels (Update)
- 使用Google新部署的W开头的中间证书签发的网站在TLS 1.2下100%阻断 / Sites issued with Google's newly deployed intermediate certificates starting with W are 100% blocked under TLS 1.2 HOT 7
- Throttling→blocking of YouTube in Russia, 2024-07-12 HOT 9
- Security Notions for Fully Encrypted Protocols (FOCI 2023) HOT 1
- shadowsocks 用户将被套杀,提前准备备用VPN / Shadowsocks will get killed, prepare a backup VPN in advance HOT 3
- Cbs: A Deep Learning Approach for Encrypted Traffic Classification with a Mixed Spatio-Temporal and Statistical Features Classification HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from bbs.