Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

TCP/UDP/ICMP traffic over UDP tunneling

github.com

Post reply on HN
Print view View original

1–10 of 21 posts

Re: TCP/UDP/ICMP traffic over UDP tunneling

#2

Post by sohkamyung »

Is this assumption true of all mobile network providers? If yes, wouldn't the network provider notice the huge increase in UDP traffic from your phone and start blocking it?

"How it works

By default mobile provider blocks any packet but UDP packet, unless you pay for the service. My method consists in sending TCP/UDP/ICMP frames as payload of an UDP packet to a known host (your server). Your server reinjects these frames to Internet."

Re: TCP/UDP/ICMP traffic over UDP tunneling

#3

Post by jsnell »

sohkamyung wrote: post #2

Is this assumption true of all mobile network providers? If yes, wouldn't the network provider notice the huge increase in UDP traffic from your phone and start blocking it? "How it works By default mobile provider blocks any packet but UDP packet, unless you pay for the service. My method consists in sending TCP/UDP/ICMP frames as payload of an UDP packet to a known host (your server). Your server reinjects these fr…

It definitely won't be true for all mobile operators. I'd be a bit surprised if it's even true of the original one at this time. The software seems to be from two years ago, and this would have been a stunningly generous policy by the standards of that time period -- the description says that they were only blocking TCP port 80! (Already 10 years ago the main hole open in captive terminals was properly formatted DNS requests/responses, so you'll find a lot of ip-over-dns tunneling projects from around that time).

Re: TCP/UDP/ICMP traffic over UDP tunneling

#7

Post by eps »

A010 wrote: post #6
rsy96 wrote: post #5

How is this different from a VPN over UDP, like OpenVPN or Cisco Anyconnect?

> It's useful to avoid Internet restrictions It's used to bypass DPI where known VPN softwares are already filtered.

How many providers have DPI filtering for select apps on unauthenticated connections? Exactly zero.

Re: TCP/UDP/ICMP traffic over UDP tunneling

#8

Post by fenesiistvan »

sohkamyung wrote: post #2

Is this assumption true of all mobile network providers? If yes, wouldn't the network provider notice the huge increase in UDP traffic from your phone and start blocking it? "How it works By default mobile provider blocks any packet but UDP packet, unless you pay for the service. My method consists in sending TCP/UDP/ICMP frames as payload of an UDP packet to a known host (your server). Your server reinjects these fr…

Yes, this will not work at all in countries/ISP with VoIP blockage. You might check mizutech voip tunnel (http://www.mizu-voip.com/Software/VoIPTunnel.aspx) using more serious encryption and obfuscation and still in need for constant improvements because of "deep packet inspection" used nowadays by many ISP's. Some provider blocks all UDP, some allows only HTTP on port 80 and there are ISP's with even more restrictions. For example in Iran the ISP just drops all stream with both up and download, thus making all these kind of simple hacks unusable. (To bypass such kind of blockage you need to split your traffic to multiple up/download links via multiple server addresses).

Re: TCP/UDP/ICMP traffic over UDP tunneling

#9

Post by PinguTS »

rsy96 wrote: post #5

How is this different from a VPN over UDP, like OpenVPN or Cisco Anyconnect?

Exactly, that was my first thought. I have an OpenVPN endpoint on different ports over UDP and TCP available.

My experience is, that UDP is also blocked like TCP. The only possible work around is then IP over DNS, which works but with very very limited bandwidth.

Post reply on HN