GoodbyeDPI support for Turkey
I've made sure there's no existing feature request / Я убедился, что такой функциональности еще никто не предлагал
- [x] I've made sure there's no existing feature request / Я убедился, что такой функциональности еще никто не предлагал
Describe your feature / Опишите ваше предложение
In the past few days, multiple sites were blocked in Turkey (Instagram, Roblox and most likely Tiktok in the next few days) and this has created a concern among people due to the possibility of more and more VPNs being blocked by the Turkish government, therefore limiting bypassing methods even more.
There is a fork of this repository that is designed to work for Turkish users, but the last commit was from 2022 and it had never been updated since then. I would really appreciate it if any of the contributors were to make a special version for GoodbyeDPI like Russia.
What exactly do you want to see in that special version? Domains?
Domains. There's a command file that retrieves all the blocked sites in Russia and saves them into a .txt file, but it's only made for the Russian version. Most of the times I tried GoodbyeDPI, it didn't work well for certain sites. I can't remember which ones were not working for certain, but as the list for these blocked sites expand pretty much every day, there is a growing possibility of recently-blocked sites not being on the list of "blacklist-russia.txt", therefore I need to manually add them myself.
Not to mention that Russia has over 100.000+ blocked sites (according to "blacklist-russia.txt") while Turkey has over 1.000.000+, so the chances are pretty likely.
You need to have url which gives you all domains. I dont know anything like it for turkey.
I'll try to search for one. I'll put it here if I find one.
You can fork it for turkey and include your cmd.
If the only issue with the current solution is in the blacklist file not being up-to-date with Turkish restrictions, why wouldn't you just ignore the blacklist and use GoodbyeDPI on all traffic?
It works in Turkey, just tried it. Using any_dns file plus yandex.dns set up in windows with dns over https link from yandex dns, it works.
Most of the times I tried GoodbyeDPI, it didn't work well for certain sites.
Personally tested and confirm it works for all sites with Turkcell and Millenicom(Türk Telekom), you need to experiment with configuration and as @zelosleone said, use DoH.
It even partially works for KYK dorms (they have even more aggressive approaches like ~~TLS downgrade~~ making user install certificates) with correct config.
I can't remember which ones were not working for certain but as the list for these blocked sites expand pretty much every day, there is a growing possibility of recently-blocked sites not being on the list
A) Just run it without a blacklist. Performance impact is negligible and there is configs that circumvent DPI without breaking sites. B) Make a blacklist yourself and contribute.
Turkey has over 1.000.000+, so the chances are pretty likely.
Nonsense, you can get away with 100-1000 custom domains in worst case. As majority of those blocked sites are phishing ones that you shouldn't even bother.
Where dis you even get that number anyway? https://www.usom.gov.tr/adres says 337k.
If somebody will make a direct link with the list of blocked domains (as it is for russia script), I will include .cmd files with the list in next release.
Where dis you even get that number anyway? https://www.usom.gov.tr/adres says 337k.
USOM only blocks domains for cyber security concerns, which is mostly irrelevant for what most people are going to use something like GoodbyeDPI for. It doesn't provide a list of domains blocked for other reasons.
If for some reason you wanted to access these domains, the list can be found at https://www.usom.gov.tr/url-list.txt.
I'm not aware of a quick and easy way to obtain a list like this for domains censored on non-security related grounds.
As someone who has been using goodbyeDPI for a long time, I also complain about this situation. I don't know much about cyber or security, but while I could use goodbyeDPI until 3-4 months ago, now I can't access banned sites when I run the .bat file.
With the recent banning of the sites with the most user traffic in Turkey (such as instagram.com, roblox.com, wattpad.com), using goodbyeDPI will be very useful. Please help regarding this issue.
@ValdikSS There is a list of blocked domains here: https://www.usom.gov.tr/url-list.txt
Thanks
Have you tried different settings (command-line arguments) for the executable? This tool essentially provides multiple common techniques to byepass DPI, so generally speaking you need to find those which works for your particular case. You can also try any GUI-wrapper for GDPI like https://github.com/Virenbar/GDPIControl for easier tests of various combinations (* I haven't tested this tool myself, just as a reference)
As someone who has been using goodbyeDPI for a long time, I also complain about this situation. I don't know much about cyber or security, but while I could use goodbyeDPI until 3-4 months ago, now I can't access banned sites when I run the .bat file.
With the recent banning of the sites with the most user traffic in Turkey (such as instagram.com, roblox.com, wattpad.com), using goodbyeDPI will be very useful. Please help regarding this issue.
@ValdikSS There is a list of blocked domains here: https://www.usom.gov.tr/url-list.txt
Thanks
That is a list of malicious websites and, if you search through the file, it does not include any of the legitimate websites blocked by the relevant Turkish authorities (i.e. BTK). It is better to keep those blocked. Creating a list yourself or somehow scraping the BTK's website query system, or any other way to obtain the block list from BTK can be the better option.
It works in Turkey, just tried it. Using any_dns file plus yandex.dns set up in windows with dns over https link from yandex dns, it works.
The last time I tried, some sites didn't seem to open. I'm not sure if it's because of the version of the .bat file I'm using but from my experience, that's what happens on my case.
The last time I tried, some sites didn't seem to open. I'm not sure if it's because of the version of the .bat file I'm using but from my experience, that's what happens on my case.
Same way in my case, and I don't think the problem is dns related.
That is a list of malicious websites and, if you search through the file, it does not include any of the legitimate websites blocked by the relevant Turkish authorities (i.e. BTK). It is better to keep those blocked. Creating a list yourself or somehow scraping the BTK's website query system, or any other way to obtain the block list from BTK can be the better option.
Even when I create and edit a blacklist text and .bat file for myself, I still cannot access banned sites.
In Turkey, DNS or IP ban varies depending on internet service providers. We can access the website we want with some telecommunication companies, Netspeed, Turkney (non-governmental) ISPs and DNS. But most of the remaining ISPs (Turk Telekom, Superonline, Turksat) ban sites by IP address.
I don't know much about networking, but I wanted to add it in case it could help speed things up.
Simply running goodbyedpi with --set-ttl 7 and no other options (with or without a blacklist) works in my experience.
ISP: Superonline
I've noticed some interesting inconsistencies between different browsers, curl, etc., but the above configuration has worked for me universally.
Simply running goodbyedpi with
--set-ttl 7and no other options (with or without a blacklist) works in my experience. ISP: SuperonlineI've noticed some interesting inconsistencies between different browsers, curl, etc., but the above configuration has worked for me universally.
My ISP: Turkcell And goodbyedpi has not been working for about 4-5 months. (Default settings)
I have been actively pursuing BTK and ESB to gain access to the block list that is provided to ISPs. No successful outcome expected.
I think maybe someone could contact freewebturkey.com ? According to this article they have a pretty detailed tracking of censored websites and URLs