multi-hop + DAITA-like system

[supplement 0]

Mullvad's DAITA is a very interesting approach to the emergence of AI and the possibility of correlating packet size in real time in order to deanonymize the user.

Are there any plans to implement multi-hop? It would help against two issues:

- The ISP can see which VPN server you are connected to
- The datacenter's ISP can log the user's IP. Using a two-layered approach helps against this.
 

Edited ... by supplement

[Staff 10097]

On 3/4/2025 at 8:53 PM, supplement said:

Are there any plans to implement multi-hop?

Hello!

Multi-hopping is a client side feature. And yes, in 2012 a special "OpenVPN over Tor" mode was implemented in the Eddie AirVPN software for Desktop systems. The main "alien entity" used to multi-hop in a way that really enhances the anonymity layer strength is the Tor network as usual, as it provides a very balanced solution between usability, reliability and effectiveness.

In the near future we could implement a double-hop support inside the same AirVPN network on the AirVPN Suite for Linux. It's not the most effective method to enhance the anonymity layer (because both hops belong to AirVPN) but it could be appreciated as a small additional comfort according to the feedback we have.

DAITA is currently overkill because in real life AIs fail miserably. The high success rates comes out only when you have a limited sample of very few services, such as 10 pre-agreed web sites, and the target browses only those 10 with no other protocol complications, quite an unrealistic assumption. However, AI abilities can become relevant in the future to harm privacy and understand, with no needs to break encryption, which web sites a user visits, thus we don't rule out that we will implement specific techniques (especially on WireGuard) in due time.

Kind regards
 

[supplement 0]

Could it be possible that there is en masse packet size collection?

[iwih2gk 95]

Staff said: Multi-hopping is a client side feature.

I use VPN chaining somewhat often.  It is trivial to setup.  Usually I prefer to add TOR to my first VPN hop, but sometimes a file download would take forever in that configuration.  If I am on a safe site downloading a safe file but just want privacy then I quickly mount a dual VPN server route.  I get pretty amazing speeds using two Air servers.  Certainly adequate and then some.  Simple stuff!!