Make SSH tunneling obfuscated?

[zsfzzo 0]

I think the idea of a stealth SSH tunneling is possible by obfuscating its handshake. Can you do this?

[zhang888 1066]

This will defeat the entire idea of a standard, widely used and uncensored protocol.

For more obfuscation you can use SSL tunneling.

[zsfzzo 0]

If SSH protocol is uncensored, what is your evidence, zhang888? Where do you live? I suppose you don’t even live in China. If you are not Chinese, have you done your tests? I live in China and sometimes my connections get reset.

[zhang888 1066]

The idea of SSH is not to hide the evidence of it's existence, quite the opposite, it's idea is to make OpenVPN look like SSH.

So any modification to SSH behavior will do more bad than good.

[zsfzzo 0]

It’s circumventing that matters, no matter what kind of tool you make use of. If SSH protocol can be improved to help people circumvent, then do that, in the spirit of AirVPN’s mission statement. Psiphon has already done that.

[Staff 9972]

It’s circumventing that matters, no matter what kind of tool you make use of. If SSH protocol can be improved to help people circumvent, then do that, in the spirit of AirVPN’s mission statement. Psiphon has already done that.

 

Hello!

 

We have several customers from China who can use our service with "OpenVPN over SSL" successfully. OpenVPN over SSH is usually successful too, but it is normally throttled more and it is also less efficient (stunnel is better than ssh under this respect). On mobile lines, in various cases avoiding UDP is enough (otherwise you will need OpenVPN over SSL on mobile devices too).

 

Kind regards