OpenVPN Obfuscate

[Taomyn]

Is there a way to set up OpenVPN obfuscate? I saw an old thread alluding that it's possible but no instructions anywhere.

[mimugmail]

You can use shadowsocks, but you need a public server to connect to.

[Taomyn]

You can use shadowsocks, but you need a public server to connect to.

Thanks, but I want to be running it all myself

[mimugmail]

Is the OpenVPN server also OPNsense and under your control?

[Taomyn]

Is the OpenVPN server also OPNsense and under your control?

Yes, it's my firewall, that's what I was asking to set it up on -sorry if that wasn't clear. I have a compatible client and a need to start using it. Could do it by creating an internal Obfsproxy server, but that just makes it more complex, not that it couldn't be done.

[mimugmail]

I only know the way via Shadow .. thought the other one requires a patch

[fabian]

As far as I know any SOCKS proxy works.

[Taomyn]

As far as I know any SOCKS proxy works.

Ah ok thanks, care to recommend any documentation on setting this up or is it already in OPNsense somewhere?

[Taomyn]

Actually, just spotted the "shadowproxy" plug-in on the firewall, so will play with that and see what I can achieve.


Thanks again.

[franco]

OpenVPN XOR should still work...

https://tunnelblick.net/cOpenvpn_xorpatch.html#scramble-option-syntax

... simply add it to the Advanced Options for client and server.


Cheers,
Franco

[fabian]

@franco the most extreme way to hide OpenVPN on OPNsense is per TOR using stealth hidden services