Within a corporate network I'm sitting behind a DPI (deep packet inspection) firewall. Is there any way to break out? I don't know the manufacturer of the firewall - all I know is, that it work with DPI and is also capable to look inside of encrypted (HTTPS) traffic.

You might look at the pluggable transports like obfsproxy which is designed with DPI in mind. You might also try using a bridge relay rather than the regular 9 directory authority servers. These are the two typical ways firewalls can be bypassed that I know of.

  • If it's actually doing DPI to block Tor a Bridge Relay won't help. – Sam Whited Nov 23 '14 at 20:34
  • This is likely true, it all depends on the configuration of the firewall you are trying to circumvent. The only case where a bridge relay would help is if the ip addresses of known exit nodes are being blocked. Firewall configurations can vary greatly, so you will probably need to try multiple solutions to find what works. – August Germar Nov 23 '14 at 20:41
  • A bridge relay + pluggable transport (e.g. obfs4proxy) works through DPI looking for the tor applicazion pattern. – blau Jul 15 '16 at 13:17

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.