JSC KazTransCom, AS35104, has deployed or begun testing deep packet inspection (dpi) of all Internet traffic. They specifically target SSL-based protocols for blocking. This includes Tor, IPsec, and PPTP-based technologies, as well as some SSL-based VPNs. Business and private users of these technologies are equally affected.
Тут давно уже половина интернета не работает. Самое смешное - походу блокируют сайты по вайлдкарду *blog*. SSH или VPN в нормальную страну, только так можно жить.
«RetroShare network allows people to create a private and encrypted file-sharing network. Users add friends by exchanging PGP certificates with people they trust. All the communication is encrypted using OpenSSL and files that are downloaded from strangers always go through a trusted friend. In other words, it's a true Darknet and virtually impossible to monitor by outsiders»
In December 2011 we were aware of Kazakhstan increasing Internet censorship in response to some unrest and protests in Zhanaozen in the west. The censorship was then deployed around the country, in many cases with the full support of the populace. The initial invesitgation showed simple IP address blocking coupled with basic dns censorship. Tor continued to work without incident until this week.
JSC KazTransCom, AS35104, has deployed or begun testing deep packet inspection (dpi) of all Internet traffic. They specifically target SSL-based protocols for blocking. This includes Tor, IPsec, and PPTP-based technologies, as well as some SSL-based VPNs. Business and private users of these technologies are equally affected.
То есть, вначале блочили отдельные IP-адреса и DNS-записи, но сейчас перешли к глубокому анализу траффика и блочат уже вообще протоколы на базе SSL, включая Тор и прочее, в том числе, частные VPN-сети.
Нечто похожее ранее начал делать Иран.
Интересно, как скоро противоядие напишут. Такое противоядие, как мне кажется, должно пытаться маскировать пакеты под обычный http-трафик с элементами стеганографии.
А i2p вообще прикрыть будет нереально (а тем более Freenet).
Могут, если i2p-трафик легко отличить от остального. Кстати, а почему тем более Freenet, если как я понимаю, это в принципе технологии на схожих идеях?
Luckily, due to our recent experience with Iran we have an answer for people: use obfsproxy. Obfsproxy continues to work in Kazakhstan, as well as Iran. In fact, it works in any country where dpi is used to censor citizens' access to the Internet.
использовать надо obfsproxy, как уже говорили в этой теме. Продолжает работать.