logoalt Hacker News

cookiengineer • today at 2:46 AM • 0 replies • view on HN

As the author pointed out, most soft routers are easily blockable because their protocol can be observed even from an opaque perspective.

Tricks for obfuscation I learned over the years:

- use exfil protocols (e.g. http smuggling via chunked encoding, DNS TXT)

- rotate exit nodes while sessions not only between (ronin behavior)

- encryption is useless with no padding or zero based padding, use one based padding instead

- scatter traffic through peers

- use manual caching everywhere, DNS TTL, HTTP entity based tracking, etc will be automatically unfeasible

- always think about the god's eye perspective of ISPs

One of my working soft router concepts, I've open sourced as Tholian Warps [1]

[1] https://github.com/tholian-network/warps