DPI technology to block Telegram: will it work and how to get around
Web Services Technologies / / December 19, 2019
In 2018 Roskomnadzor actively blocked Telegram and different sites, but its methods only prevented the other Google services. The popular instant messenger is now available on its own, and banned sites can be accessed through a proxy. Of course, Roskomnadzor is not satisfied.
Recently, a rumor appeared on the networkRoskomnadzor will introduce new technology Telegram locks for 20 billion rublesThat the government plans to spend 20 billion rubles to the new locking system with a DPI. The head of Roskomnadzor, Alexander Zharov this information officially deniedZharov: Roskomnadzor did not spend 20 billion rubles for the development Telegram locking systemsBut he said that the agency is improving their systems. So perhaps, after all it is planned to use DPI. And it is better to prepare for it in advance and learn how to get around the block.
What is DPI and how this technology
When we do Web surfing or We communicate to the messengersComputers exchanged between the data blocks, ie packages. Earlier control technology only checks the headers and senders of packages and on the basis of the blocked information files transmitted Telegram or forbidden sites. But the impact of such a measure could easily be circumvented by replacing using proxy data about the sender.
DPI technology The name stands for Deep Packet Inspection, ie "deep packet inspection". It not only checks the headers and the sender, but also the contents of the arrays, and based on this determines which application or site is their source.
To make it clearer, we give an analogy. Imagine that blocker - a customs officer who checks the package. Previously, he was looking only to their senders, so if Telegram sent a "parcel", that is, the data packet through a proxy, its customs-blocker missed.
If the border control officer will work on DPI technology, it is not just check the sender's name, but will reveal the contents of the parcel and understand that it should be of a prohibited source.
The analogy is not entirely accurate, because even with the technology of DPI blocker can not view the actual messages that you send. That is, the data remains confidentialBut their "packaging" clearly points to an illegal site or application that allows you to lock the package.
What is the problem with the introduction of DPI
In theory, the method works flawlessly, but in practice the ideal technology does not exist. DPI equipment is difficult to set up, and it is very expensive.
Even if you have money and experts, the technology can fail. Various applications and websites packed data packets are very similar, so there is a risk that instead Telegram block some the allowed instant messenger, "VKontakte" or banking services. If packages are protected by encryption, it is more difficult to identify their content, and the probability of error is even higher.
This means that failure to use the DPI can paralyze almost all Russian Internet - and in this case the technology accurately shut off. But there is a chance that everything will work fine - especially since there are already successful examples.
Which now applies DPI
In the world of DPI is not used for blocking, and for advertising goals. Technology analyzes all user packets, and then embeds them ads based on people's behavior on the web. Such marketing is very popular in the US and Europe, although not cheap costing providers.
In Russia, the DPI is actively used mobile operators. With this technology, they:
- limit the connection speed after the user has spent his entire monthly Internet traffic;
- regulate the speed of Torrent, Skype and other services, or block them when accessed through the mobile device;
- notice when the Internet is not used on the phone, and is distributed on your computer.
Some Russian ISPs use DPI, to restrict access to forbidden sites not only over IP. This applies to resources that work over HTTP protocol insecure - against the more secure HTTPS method is inefficient due to the fact that the encrypted packets.
But the most widely used in China DPI. Here on this technology spentNetwork through the scope DPI: Anatomy of the Chinese Internet about a billion dollars, and it is almost perfectly covers from websites of Chinese citizens, which the government considers dangerous. But we have to be afraid of such an option should not be - apparently, so much money in the mechanism of application of DPI we invest are not yet ready.
How to bypass the DPI
In Russia, this technology is unlikely to work perfectly, so there is a chance that the Telegram he will take steps to lock bypass, for example will further encrypt packets. Ex-director of special directions Telegram Anton Rosenberg notedRoskomnadzor will introduce new technology Telegram locks for 20 billion rublesThat the DPI is unlikely to help in the closure of access - messenger will mask their packages and change protective techniques much faster than Roskomnadzor can respond to them.
If the system still starts work or already working in your provider to block the site, then you can try to get around the ban, with special programs. One of them - GoodbyeDPI. It operates through the command line, so you need to carefully read the manual - it will be easy to understand.
While Roskomnadzor not really spend on the development of solutions to block millions of dollars, especially do not worry. Perhaps, Telegram will operate a little worse, but completely prohibit access to it (and to the sites under the protection of HTTPS) will not be easy.
see also🧐
- 10 Telegram capabilities, which is useful to know
- How to bypass a blocked Telegram
- VPN Lite - quick free VPN with no registration and advertisement