Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Split by SNI #357

Closed
ValdikSS opened this issue May 30, 2024 · 0 comments
Closed

Split by SNI #357

ValdikSS opened this issue May 30, 2024 · 0 comments
Assignees
@ValdikSS
Labels
enhancement Fragmentation

Comments

@ValdikSS
Copy link
Owner

Describe your feature / Опишите ваше предложение

Search for SNI extension and split packets so the extension is split in two parts.
@ValdikSS ValdikSS self-assigned this May 30, 2024
ValdikSS added a commit that referenced this issue May 30, 2024
@ValdikSS
Fragment packet by the beginning of SNI value. #357
15eb10a 
It has been reported that the DPI systems in Saudi Arabia and
United Arab Emirates are started to search for the beginning of
SNI extension header and its value, without parsing the TLS ClientHello
packet, in any part of TCP session.

Workaround the issue by splitting the packet right after the end
of extension headers and before its value.

https://ntc.party/t/goodbyedpi-in-saudi-arabia/7884
https://ntc.party/t/goodbyedpi-in-uae/7914
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ValdikSS ValdikSS

Labels
enhancement Fragmentation
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ValdikSS