search

celzero / rethink-app

DNS over HTTPS / DNS over Tor / DNSCrypt client, WireGuard proxifier, firewall, and connection tracker for Android.
https://rethinkfirewall.com/
Apache License 2.0
2.82k stars 144 forks source link

Improve DPI circumvention #386

Open piousdeer opened 2 years ago

piousdeer commented 2 years ago

RethinkDNS currently has basic anti deep packet inspection functionality, same as in GreenTunnel (https://t.me/rethinkdns/22091). It does not work in Russia, censored websites are still blocked with RethinkDNS enabled.

Related open-source anti-DPI software

Tested and working: PowerTunnel (Desktop) PowerTunnel (Android)

Untested: DPITunnel (Android) GoodbyeDPI (Windows) zapret (Linux) GreenTunnel (Desktop)

ignoramous commented 2 years ago

See also: celzero/firestack#1

0xRustlang commented 2 years ago

Agree, i heard last year that some users had success to use these tools, although DPI tunnel (Android) don't work for me (but may be i don't know how to use it)

0xRustlang commented 2 years ago

But most blocking here is harder than something that can get around with Anti DPI apps and intra.

They just make normal browsing a litter better, you can't use internet as you want if you don't use vpn. (Of course for those of us that read foreign websites mostly)

For users that just use Instagram or iranian websites there isn't much problem nor in speed nor odd annoyances.

MicroBeast commented 1 year ago

This's more a related feature request.

Split DPI Circumvention as own toggle/option so we could use it when using Rethink app as DNS only or Firewall only.

Or should I create new Feature Request issue?

ignoramous commented 1 year ago

Hm... DPI circumvention without a tunnel / proxy mostly involves mucking with the outgoing packets. This isn't possible at all in DNS-only mode.

MicroBeast commented 1 year ago

Got it. I understand. I kind of already thought so. But I don't have much experience in Networking to confirmed it.

Thanks.

lepz0r commented 1 year ago

There's also DPI Circumvention tool called geneva but it's only for Linux & it's slow as it's written in Python but it's versatile

Pantyhose-X commented 8 months ago

It's been three years and it hasn't been implemented 😞

ignoramous commented 8 months ago

It's been three years and it hasn't been implemented 😞

It isn't like we've been idle doing nothing ;) If you're serious and ready to fund this effort (let say, $3000 for upto 3 more DPI mitigations), email me: mz at celzero dot com.