SSH use wenne TCP protocol eka. ethana handshake patterns walata unique data packet wala pattern ekak thiyenawa.
Port eka 22 indan wena onama port ekakata maru karath ethanin balala hoyanna puluwan traffic eka SSH da kiyala. (DPI karala)
VPN walath ehemai.
namuth stealth mode yanna puluwan depaththata stunnel dagena onama magulak ssl traffic ekak wage peenna hadagena.
oya dan cheennu yanne shadowshock gahagena ea wage. unge great firewall eka bypass karanna puluwan ehema.
methana tawa case ekak thiyenawa.
1. ISP ta karanna puluwan BLOCK karana eka. namuth minissunta eka koheta hari tunnel ekakin ringanna puluwan.
2. Un ehema block karala thiyenakota tunnel karala gihilla ahu unoth ekata neethiyen kelonawanam puthe ethakota yanna ona widiha wenas. ekiyanne stealth mode tunnel karagena yana eka eetath wada thadinma stealth mode ekakin yanna wenawa.
ekiyanne api hithamu government eken porn sites block. vpn daala giyoth jail kiyala.
ethakota uba karanna ona oya fastssh wage shared host walin ganna SSH account use karana eka nemei, mokada ea IP walata ubage device eke idan TCP connection ekak hadanna ona mona stealth gahuwath ISP ta ea tcp connection eka penawa. ea IP eka ung dannawanam VPN IP ekak kiyala, well known ekak nam ung suspect karanawa uba VPN use kara kiyala or tunnel kara kiyala. ekiyanne uba stunnel daagena giyath wadak na ube connection eka kochchara encrypt wela kochchara innocent widihata penunath traffic eka, uba connect wena IP eka ISP ta penawa traffic eka encrypt unaata wadak na IP eka penawa, SNI ekak thibunath IP eka penawa, SNI kiyanne nikan ssl label ekak witharai,
ekiyanne hariyata nikan uba curfew dagena iddi VAN ekaka athyawashya sewa kiyala board ekak gahagena pare yanawa wage. namuth yana paara policeyata penawa, yana VAN eke number plate ekath penawa. Numberplate eka check karoth wisthara thiyenawa. me paare giyoth kohetada yanne kiyala policeya dannawa well known parak nam, ethakota display karan yana board eka adaalama na ethakota. athyawashya sewa kiyala gahagena mudukku asse ringala kudu transport karaddi ahu wenawa wage wadak wenne.
, etakota wenne ip eke whois wala thiyenawa uba fastssh ekata yanne kiyala, mokada ea IP eka common ekak. thawa minissu use karanawa eka tunnel walata. ethakota ea IP eka block karanna puluwan or ubata wiruddawa law eka use karanna puluwan.
namuth kalin sandahan karapu number 1 simple block ekedi nam ISP karanne ea IP eka block karala nikan inna eka uparima unoth, namuth law case ekakadi ubata eeta wada hithanna wenawa.
ea wage awasthawaladi ubata karanna puluwan de gena idea ekak dunnoth,
ubata puluwan Microsoft IP ekak ganna. for an instance microsoft azure wage ekak, eke whois baluwahama peenne microsoft kiyala. ethakota uba connect wena network eke indan tcp connection eka hadanne microsoft ip ekakata.
ea wagema uba ea vps eka use karanne ubage pudgalika wada walata witharai. uba eka share karanne na ka ekkawath.
ea ekkama thawath important deyak, uba azure account eka buy karapuwahama azure eken ubata denawa ssh connect wenna details.
ekiyanne IP, root password, ssh key, port, wage dewal. uba gona wage gihilla palaweni paratama ube computer eken oya microsoft IP ekata ssh connect wunoth server eka config karanna kiyala, mokada wenne? ISP ge log wenawa me microsoft IP eke SSH ekakatath uba onna connect wela thiyenawa. ube gedara indan (isp dannawa uba connect wena IP okkoma) me IP ekata mulinma connect wune SSH kiala. eetapassei onna uba tunnel eka config karagena, port 443 (SSL) through browse or adala dewal karanna patan ganne, namuth mulinma uba microsoft ip ekata unath SSH connect wela thiyenawa kiyanne ethanadi badu mattu, unge log eke thiyenawa, ethakota un suspect karanawa uba azure ekek kiyala. ekiyanne unge log database eken mun mulinma hewwoth SSH log wechcha ewwa, ethanin uba adala IP ekata connect wela thiyenawa SSH, eetapasse ea IP ekata hadana ewwa okkoma SSL ewa, ekiyanne ethanin therenawa uba VPS eka aragena ekata vpn or tunnel dagena hadagena dan baba wage microsoft yanawa kiyala penna penna (FAKE SNI) uba jalthara wada karanawa athi kiyala.
ea nisa uba mulinma microsoft gihin, azure aragena, azure eke key ekai port ekai upload karanawa thawath adala nathi wena kohewath VPS ekakata, eetapasse ea vps eka athulen uba microsoft ekata connect wela ethana indan azure eka ta openvpn dala stunnel dala hadagannawa, eetapasse onna ube censor karapu network eka through connect wela tunnel eka athulen connect wenawa. anna ethakota ISP dakinne ube palaweni traffic ekath SSL ekak widihata. ethjakota eka 100% innocent traffic ekak. saha uba fake SNI ekath gahuwoth microsoft.com kiyala or onedrive.com wage ekakata, or office site ekakata, ethakota unta hithenne uba cloud ekata file danawa athi kiyala. kochchara loku traffic ekakin giyath un hitahne uba backup karanawa athi file or monawahari kiyala, ethakota mattu wenna kisima widihak naha.
uuu ea IP eka aragena uge web browser eke gahawwoth, eath ubata microsoft.com eka load wenna hadanna puluwan openvpn port share dala. or cloak wage ekaka settings walin. ethakota openvpn server eken balanawa incomming traffic eka enne openvpn client ekak harahada, naththan, wena monawahari traffic ekakda kiyala. openvpn dannawa uuta ena traffic monawage da kiyala identify karaganna, authentication ekedi key exchange karagaddi. eka invalid nam openvpn ta puluwan wena port ekakata traffic eka redirect karanna. ethakota ISP ubawa test karanna kiyala uu IP eka port eka check karath anik ports okkoma block karala 443 witharak allow karala thibbama, uuta karanna puluiwan de IP eka aragena web browser eke gahana eka, ethakota openvpn eken detect karanawa ea traffic eka, eetapasse traffic eka different port ekakata forward karanawa.
api ea different port eka simple python http server ekak or apache ekak host karala thiyala, eken HTTP redirect ekak gahanawa official microsoft.com ekata (301 redirect ekak) ethakota azure vps eke IP eka aragena kauru hari web browser eke gahuwath, uuta penne eka microsft wage, mokada ethakota microsoft web site eka load wena nisa.
aye ethakota mokekuta wath hoyanna baha. ISP anduranne nahane, microsoft eke wada karana minissu, Microsoft eke ewun ma awilla kiyanna ona ISP ekata ethakota me ip eka ape official site eke ip eka nemei kiyala. ehema kiyanne nane, anika ISP ta nikan random IP ekak balala, eka browser eketh gahala, eka aragena microsoft eka load unama, microsoft ekenuth ahala balanna tharam puke ammak nahane, and ehema ahuwath microsoft eke ewun CDN walin traffic serve karanne, eka eka ratawal walata eka eka IP walin route wenne. ewwa hoyanna tharam usawi niyoga ganna ba kohewath