I wish VPN also considers DPI when they design their protocol. It just sucks that every self-claimed decentralized app can easily be blocked. They can block faster than you can host another new instance & migrate users.
In case your favorite VPN provider does not provide these protocols you can buy a VPS and deploy one of these protocols by yourself.
> If you just set it up and use it yourself, at most you will just be given a verbal warning and urged to rectify and confiscate the tools. If you set it up and give it to your friends to use, there may be risks, but in reality, law enforcement agencies usually don't have extra time to manage these small things. If you set it up for your friends to use, the traffic of three or five people is very small, just normal access to the external network, and there is no other illegal behavior such as money laundering, telecommunications fraud, etc. No one cares. If you are the airport owner, that is, the VPN commercial service provider, then your legal risk will be very high, you will be involved in illegal operation of telecommunications services, because this requires you to apply for a license, and VPN commercial service providers usually earn large illegal income, may be sentenced and confiscated for several years. Note that the sentence is due to its illegal operation. Once he has the qualifications, then he will be a legal communication service.
> Because such behavior can be subject to administrative penalties at most in the law, which is what I just said, warnings or orders to make corrections and confiscate tools, and at most fines, but generally not. The fine will be determined based on your attitude of admitting your mistakes. If your attitude is good, there will basically be no fine. In addition, if there is illegal income to be confiscated, such as illegal income obtained by browsing the Internet and conducting cross-border money laundering or cross-border telecommunications fraud or computer network crimes with international illegal organizations, it will be confiscated.
Funnily enough, he says almost everyone used VPN-like technologies, even within the regulatory agencies.
wstunnel: https://github.com/erebe/wstunnel
There is no wrappring of udp packet into another layer of TCP. Wstunnel unpack the data at the client forward it using tcp/websocket, and after re-take this data to put it back into its original form (i.e: udp)
so there is no encapsulation of many protocol.
The only place where there is encapsulation, is for tls. if your client use tls to connect to wstunnel server. And that your data is already encrypted with tls (i.e: https) there will be 2 tls encryption