Hacker News Reader

Comment by kburman | Hacker News Reader

For anyone in India, just use a DoH client and you would be good to go.

I use greentunnel and it works fine.

Greentunnel is not just a DoH client. Greentunnel also breaks up your packets in such a manner that prevents SNI sniffing, which is what makes it able to prevent blocking by Jio.

> Greentunnel also breaks up your packets in such a manner that prevents SNI sniffing...

Yep, here's the code that does the trick: https://github.com/SadeghHayeri/GreenTunnel/blob/master/src/...

Hmmm... No thanks.

    "dependencies": {
      "app-data-folder": "^1.0.0",
      "chalk": "^2.4.2",
      "clear": "^0.1.0",
      "consola": "^2.11.0",
      "debug": "^4.1.1",
      "dns-over-http": "^0.1.2",
      "dns-over-tls": "0.0.6",
      "esm": "^3.2.22",
      "is-docker": "^2.0.0",
      "lru-cache": "^5.1.1",
      "node-localstorage": "^2.1.5",
      "ora": "^3.2.0",
      "std-env": "^2.2.1",
      "universal-analytics": "^0.4.20",
      "update-notifier": "^2.5.0",
      "validator": "^10.11.0",
      "winreg": "^1.2.4",
      "yargs": "^13.2.2"
    },

Is something like greentunnel necessary. I'm in India and I've found that Firefox with its builtin DoH connection to Cloudflare seems to bypass all govt blocks I've personally come across. Haven't tested specifically for this though... just normal browsing experience.

Try using your setup to access a blocked website on a Jio connection. You'll find why greentunnel is required :)

DoH just by itself won't help unfortunately, since it just fetches the DNS (btw, only Airtel, ACT, BSNL, and MTNL bother with DNS censorship).

ISPs have been looking at the cleartext hostname in the TLS handshake to block these connections

As someone correctly pointed out, greentunnel does much more than DoH.

Thanks to everyone in this subthread. I'm on BSNL which I find is one of the Indian ISPs that seems to implement easy to circumvent blocks (DNS based), so far. Reliance no doubt is a different beast with its financial and technical clout and increasing market share. Rather concerning that we're quickly catching up to China in terms of implementing an increasingly sophisticated firewall.

Seriously can't expect the average Joe to know about stuff like greentunnel. And that's concerning...

Reply on news.ycombinator.com