Serverless DPI Bypassing

Zapret

DPI bypass for PC, can bypass proto blocks, can't bypass per ip blocks

Zapret2

Updated Zapret version

Zapret-discord-youtube

Public configuration of Zapret

ByeByeDPI

No root DPI bypassing for Android, works in a way similar to a Zapret

Solutions for self-hosting

3X-UI

Panel for Xray protocols(VLess, Hysteria2, Wireguard and other Xray-Core protocols)

olcRTC

for using webRTC services for videocalls as proxy, if service in whitelist you can bypass whitelist, work now, but webRTC services may trying to ban this abuses, theoretically DPI can't detect this now because voice traffic doesn't have any patterns. In addition, this service ensures high traffic speeds for high-quality video and audio. This method is possibly one of the fastest when whitelists are enabled.

S-UI

panel for sing-box protocols(NaiveProxy, ShadowTLS and other sing-box protocols)

Protocols

Old & detected protocols

do not use this for bypasses OpenVPN, Wireguard, ShadowSocks, IKEv2

VLess

A small, time-independent Xray-Core protocol that can be assembled and configured like a Lego set from transport and security protocols. Reality security good for active probing protection, XHTTP transport good for making fake http traffic, you also can use gRPC because this method is less popular among VPNs, whereas more and more businesses are switching to gRPC. TCP(Raw) is bad but this is just TCP traffic and can be detected by DPI.

Hysteria2

Xray-Core UDP-based protocol, faster than vless, especially in noisy networks, also has active probing protection, but UDP traffic is suspect for DPI

NaïveProxy

that proto using Chromium transport as proxy, You don't disguise yourself, you become Chromium traffic.

Mieru

A new proxy protocol that does not make TLS-handshakes. Simply sending encrypted traffic without TLS can allow DPI to detect the protocol, as happened with ShadowSocks. Now undetected

DNSTT

Using DNS requests as VPN, slow, but work on very strict whitelists, it can be DPIed by spam of BASE64 subdomains requests, work now

PingTunnel

Using ICMP requests as VPN, slow, but work if standart internet protos are shutdowned, slow and can be DPIed by anomaly count of large pings, work now

Clients

olcBox

Multiplatform client for olcRTC

Sing-Box Clients

1. NekoBox - Very customizable (config and rules) android client for XRay-Core protos and more.
2. NekoBox by Starifly - fork NekoBox + additional functions
3. NekoBox+ - fork NekoBox by Starifly with more funcs and patches
4. Throne - fork NekoRay for PC

Other Bypass Tricks

Cascade servers

It helps when there are strict restrictions on connecting to foreign servers—such as paid international traffic or speed throttling. Since such restrictions rarely apply to hosting providers, you can set up a cascaded server configuration: your traffic first goes to a server in your own country (ideally in the same city), then to the foreign server, and only then exits to the international network.

CDN/DDoS protection hidding

This allows you to hide your server's IP address from DPI, which offers significant advantages: on paper, the connection to your server appears to originate from a major, popular CDN network, providing an extra layer of masking. Essentially, it functions as a cascaded proxy where the first link in the chain is the entire CDN network rather than your server. If the CDN service is whitelisted, your server is effectively whitelisted too; while this method may incur additional costs, it is extremely fast.