XOR Patch Feature about tunnelkit HOT 11 CLOSED

@joosthoogendoorn Based in my experimentation with tls-crypt vs xor patch I've found the xor patch to obfuscate the packet more with tls-crypt being detectable as an openvpn packet if listening for them. Xor on the other hand ends up making it unknown traffic, at least according to my own private testing. Personally, I use both in combination as xor can be decrypted at times but tls-crypt also adds that extra tls layer of encryption

from tunnelkit.

Has this been added? If so, it would be great if you can share a demo implementation for iOS and MacOS. :)

from tunnelkit.

Open issue = not added (yet?) 😎

from tunnelkit.

I'd be open to helping with this, but do not have much of knowhow on adding this vs implementing it in OpenVPN itself. On OpenVPN you can just patch it, would you mind giving me a rundown on what is similar code-related on here and OpenVPN?

from tunnelkit.

@tmthecoder there's a PR open.

from tunnelkit.

@keeshux my bad if there's anything I can do to help, I'm available as I am looking for an active xor capable client as well

from tunnelkit.

Isn't tls-crypt, which is already supported, more effective or the same in effectiveness in bypassing firewalls? I have customers happily using OpenVPN with tls-crypt enabled to bypass the GFW, without xorpatch.

from tunnelkit.

@keeshux I think proxy.sh safejumper already implemented xor feature.I am not an expert on ios code but please have a check if helps https://github.com/proxysh/Safejumper-for-iOS
@tmthecoder yes i tottaly agree with you. tls-crypt is an option for evading DPI firewalls but not as effective as xor in my case also detected by firewall time to time.(i have been using xor on android for almost 2 years no issues at all.) I think it depends on DPI software which changes by goverment or ISP.

from tunnelkit.

Any news on subject?

from tunnelkit.

+1

from tunnelkit.

@keeshux do you have any plans for that one? I see that there's PR already for that: #170

Would love to see that feature in TunnelKit 🤞

from tunnelkit.