Any practical anti-GFW information.

dimzon commented 6 years ago

Since GWF is "the best of" censorship software I think we need some wiki|info (in English since most information is in Chinese) about which protocols are most resistant against GFW. Every anti-GFW solution must be somehow documented

Review all used protocols, especially "protocol combination". Maybe it's better to replace some combinations with better "single-protocol" alternative. For example OpenVPN+Stunnel makes VPN-over-HTTPS. At other side OpenConnect is fastest VPN-over-SSL protocol. If both have same anti-GFW resistance than it's better to choose OpenConnect since client installation is much easier...

UnamedRus commented 6 years ago

Not GWF, but in russia we have tool to avoid some types of DPI. Interesting can we avoid ban by signature of server answer with packets fragmentation?

edwinyzh commented 6 years ago

Before using streisand, I had been using ShadowSocks installed in a VPS for years without significant issues, until I installed OpenVPN in the same VPS, the IP of that VPS get blocked by GFW later.

I then created another new VPS instance and install OpenVPN again, in just two days it got blocked again. I heard that direct OpenVPN can be recognized by GFW.

So now I've just setup a streisand VPS, I have such thoughts:

Try to use Shadowsocks as much as possible, ie. when browsing the web.
when need an OS level network connection, I'll use OpenConnect instead - I heard that it's more GFW-resistant then OpenVPn, is it right?

On then other hand, since I use streisand default configuration, so OpenVPN server is also installed in my VPS, should I stop the openVPN service, so that the GFW will not find my VPS? Is it necessary? *If yes, how? Thanks.

kekukui commented 5 years ago

GFW english info site https://github.com/StreisandEffect/discussions/issues/158

StreisandEffect / discussions

Any practical anti-GFW information. #124