Traffic Obfuscation#

Overview#

Obfuscation transforms proxy traffic to look like something else — typically standard web traffic — making it harder for DPI systems to identify and block.

Common Obfuscation Methods#

• WebSocket over TLS — Wraps traffic in standard WebSocket frames over HTTPS
• TLS obfuscation — Makes traffic look like a TLS connection to a normal website
• Packet padding — Adds random padding to hide protocol fingerprints
• Protocol multiplexing — Mixes proxy traffic with legitimate traffic on the same connection
• gRPC — Wraps proxy traffic in HTTP/2 gRPC streams

Choosing an Obfuscation Method#

Consider your threat model:

• Low censorship environments — Basic TLS is usually sufficient
• Moderate DPI — WebSocket over TLS or gRPC
• Aggressive DPI — REALITY, fake SNI, or custom obfuscation

Tips#

• Layer multiple obfuscation techniques for defense in depth.
• Test your setup with an external observer to verify it blends in.
• Stay informed about new DPI techniques — the landscape evolves quickly.

Limitations#

• No obfuscation is perfect. A determined adversary with network-level access can eventually identify patterns.
• Obfuscation adds latency and overhead.
• Some obfuscation methods may be blocked once identified.