0

If I use OpenVPN on port 443 (TCP or UDP), is it possible for my ISP with deep packet inspection to find out VPN usage?

If so, what is the alternative?

Improve this question
1
  • 1
    what's the alternative to what? What do you want to accomplish?
    – schroeder ♦
    Commented Apr 26, 2017 at 13:29

1 Answer 1

Reset to default
2

If your question is whether or not your ISP can tell that you're using OpenVPN rather than browsing an HTTPS website then the answer is yes. Even though both use the same port and TLS, the handshake process differs between HTTPS traffic and OpenVPN. This means that DPI is able to differentiate between an OpenVPN connection and that which is HTTPS.

Your options for circumventing this are either SOCKS proxies (preferred) or Tor (can be detected and blocked by some parties).

If your question is whether or not your ISP can decrypt your VPN connection once one has been established, then the answer is no. They cannot run DPI on an encrypted session without performing a MITM attack.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .