The government will totally control the people’s behavior over the internet by using the technology that won’t allow them to exercise their online privacy rights or personal freedom on the internet. One of the methods used by the restrictive government to block your online traffic is by using a system called DPI or Deep Packet Inspection.

What the DPI system is doing is that it will analyze the internet traffic that is coming through your ISP. It will identify your traffic type and either allow the traffic to reach the internet or block it. If you are using the regular ISP traffic, the system will allow you to access the internet, while if you are using the VPN traffic, the system can recognize it and block your connection from reaching the internet. This is an advanced traffic monitoring system installed by the restrictive government to prevent people from using private connections and force them to follow the government’s internet regulations.

Background

As TrueVPN focuses on security and privacy, It’s clear that DPI is a huge issue!
When talking about privacy and security, We must consider that DPI that performed by some countries for VPN blocking or any other political reason comes against user’s privacy.

Why we consider it as a huge privacy issue?
Alright, to answer that, we need to understand how Deep Packet Inspection works.

Well, Deep packet inspection evaluates the data part and the header of a packet that is transmitted through an inspection point, weeding out any non-compliance to protocol, spam, viruses, intrusions, and any other defined criteria to block the packet from passing through the inspection point.

Deep packet inspection can examine the content of messages and identify the specific application or service it comes from. In addition, filters can be programmed to look for and reroute network traffic from a specific Internet Protocol (IP) address range or a certain online service like Facebook.

So by looking to the image above, We can see that DPI acts like MITM Attacks, So the encrypted user’s traffic has to be decrypted to read its data then re-encrypt it again and re-send the encrypted data to the CA. So we MUST consider that this is a huge issue of user’s privacy.

HOW TRUEVPN SOLVED THE ISSUE?

Ok, At TrueVPN we believe deeply in security and user privacy, Every user has rights to privacy, because we believe that privacy is a human right and it should be respected.

All human beings have three lives: public, private, and secret.

Gabriel García Márquez

For a long while, TrueVPN was trying to solve this issue and bypassing DPI without redirecting user’s traffic or missing with CA. If you do not know what is that means, So you must have a little knowledge of Networking.

TRUEVPN RESEARCH

Based on our Research, We’ve developed an AI tool to analyze the ISP’s connection policies before establishing the connection, by performing that, we can check if the ISP blocks the used VPN protocol by the user or recently performed Deep Packet Inspection or Bandwidth Throttling based on analytics data. This tool is powered by Skytells’s latest AI, and its powerful enough to analyze these policies.

Of course these tools are deployed on TrueVPN’s iOS App for version 2.5 and later.

HOW IT WORKS?

When you Enable Policy Checks on TrueVPN, The app will perform some checks before establishing the VPN connection, And try to solve any detected issues regarding the ISP or the living country if possible.

Lets give it an example, Imagine of a user named Doe, lives in country X, while country X is performing a Deep Packet Inspection targeting VPN providers to crack em down, So, When the users opens the VPN app and taps connect, Here’s what’s going to happen in the background

1. User Taps or Clicks (Connect to a VPN)
2. The VPN app will choose the VPN protocol if it not set by user.
3. The App chooses iKEv2 or IPSec
4. The app begins to connect using IKEv2 or IPSec
5. The App receives connection timeout message

And here’s why, When the App tries to choose the protocol on the 2nd step, it doesn’t check if the protocol has an issue regarding VPN Blocking in the current location or not, so it may ends up with connection timeout if it fails to connect.

But, by using an analytics tools based on research such as Policy Checks Mechanisms TrueVPN will perform the following steps regarding the connection.

1. User Taps or Clicks on (Connect to a VPN)
2. TrueVPN performs some checks on user’s connection
3. If there’s an issue regarding the connection (See Image), The app tries to solve it first.
4. After solving the issue, The app will choose an obfuscated protocol
5. The app begins to connect using obfuscated protocol powered with proxy tunnel
6. The App receives success response from server.

So by performing that, TrueVPN will only use a custom obfuscated protocols when needed, and these protocols are empowered by proxy tunnel to prevent DPI detection, And finally the app can bypass the VPN Blocking.

POLICY CHECKS FAQs

Here are some answers related to this feature.

Is Policy Checks Feature Free?
Yes, This feature is free.

Should in use TrueVPN with Policy Checks?
If you’re living in a country cracks down VPN connectivity or recently performed DPI, You must enable this feature.

Will This Decrease or Increase Connection Speed?
Of course no, This feature are just a mechanisms, designed to perform some analytics on ISP and connection before you connect to a VPN.

Conclusion

If you live in one of the countries who have issues with VPN Providers and tries to crack them down by blocking VPN protocols or performing DPI, Then TrueVPN is your best choice, because the app can bypass that easily.

We’ve previously talked about Deep Packet Inspection including it’s usage, Today we’re going to talk about VPN blocking.

VPN BLOCKING

VPN blocking is a technique used to block the encrypted protocol tunneling communications methods used by virtual private network (VPN) systems. Often used by large organizations such as national governments or corporations, it can act as a tool for computer security or Internet censorship by preventing the use of VPNs to bypass network firewall systems.

Blocking VPN access can be done a few different ways. Ports that are used by common VPN tunneling protocols, such as PPTP or L2TP, to establish their connections and transfer data can be closed by system administrators to prevent their use on certain networks. Similarly, a website can prohibit access to its content by blocking access from IP addresses that are known to belong to VPN providers. Some governments have been known to block all access to overseas IP addresses, since VPN use can involve connecting to remote hosts that do not operate under that government’s jurisdiction.

HOW VPNs ARE BLOCKED?

Firewalls use advanced software to perform Deep Packet Inspection (DPI) which can analyze the type and destination of every data packet traversing the network.

DPI is what allows your ISP to tell the difference between youtube, web browser, VPN, skype or any of 1000+ other types of traffic. DPI is how a network can throttle, restrict, or even block certain types of traffic.

But here’s the key: If you can disguise your VPN traffic as regular web browser traffic, you can make it impossible for a network to block your VPN unless they’re willing to block all https browser traffic. Not likely.

COUNTRIES BLOCKED USAGE OF VPNs

As organizations have ramped up efforts to block VPN access which bypasses their firewalls, VPN providers have responded by utilizing more sophisticated techniques to make their connections less conspicuous. For instance, as the Chinese government began using deep packet inspection to identify VPN protocols, Golden Frog began scrambling OpenVPN packet metadata for its popular VyprVPN service in an attempt to avoid detection.

1. China

Chinese internet users started reporting unstable connections in May 2011 while using VPNs to connect to overseas websites and services such as the Apple App Store. 
Universities and businesses began issuing notices to stop using tools to circumvent the firewall.

In late 2012, companies providing VPN services claimed the Great Firewall of China became able to “learn, discover and block” the encrypted communications methods used by a number of different VPN systems. In 2017, telecommunications carriers in China were instructed by the government to block individuals’ use of VPNs by February 2018.

2. Iran

The government of Iran began blocking access to non-government sanctioned VPNs in March 2013, a few months prior to the 2013 elections, to “prosecute users who are violating state laws” and “take offenders to national courts under supervision of judiciary service”. Use of VPNs approved by the government reportedly led to surveillance and inspection of private data.

3. Russia

In July 2017, the State Duma passed a bill requiring the Internet providers to block websites that offer VPNs, in order to prevent the spreading of “extremist materials” on the Internet. It’s unclear exactly how Russia plans to implement their new regulation; though it seems like both the Federal Security Service (FSB) and ISPs will be tasked with identifying and cracking down on VPNs.
Russian internet users have also reported a block on the ExpressVPN VPN service. In November, 2017 BBC made it clear that Russia has not banned VPN usage entirely. VPN usage is only banned when attempting to access sites already blocked by Roskomnadzor or Russia’s governing body for telecommunications and mass media communications, Using a VPN for business or personal reasons to access legal sites in Russia is permitted.

4. Syria

The government of Syria activated deep packet inspection after the uprising in 2011 in order to block VPN connections. The censorship targeted different VPN protocols like OpenVPN, L2TP and PPTP.

BYPASS VPN BLOCKING

VPN providers are aware that some ISPs/networks are blocking VPN traffic. That’s why they invented ‘Stealth’ VPN technology.

A stealth VPN can disguise/scramble your VPN traffic so it’s either not identifiable as VPN traffic, or even better — disguised as regular TLS encrypted web traffic.

Here are the two tried and true techniques to unblock your VPN service on almost any network:

#1 – Run OpenVPN on port 443

Port 443 is the port commonly used by SSL/TLS encrypted web traffic. This is a standard internet encryption protocol that you use every time you access a website with sensitive account data, like your bank, credit card, or tax account.

Since OpenVPN already uses the SSL encryption library, simply by switching the port # to 443, it will easily slip through all but the most rigorous DPI firewalls.

How to use port 443

Most high-quality, paid VPN services will allow you to switch the port # (or have dedicated server locations that access port 443). If you need help setting it up, just contact tech support for you VPN provider.

#2 – StealthVPN / Obfuscation

Even if you use port 443, most VPN protocols still have a data packet ‘header’ which is like a fingerprint that can potentially allow a firewall to recognize traffic as VPN traffic.

By using a VPN service that has Obuscation or ‘Stealth’ technology, your VPN connection can rewrite or obscure the packet headers (smudge the fingerprint) so it’s unrecognizable.

VPN with stealth/obfuscation technology:

• TrueVPN (Score: 4.9 out of 5)

#3 – Use WireGuard Protocol

Use a VPN that supports WireGuard protocol, such as TrueVPN

WireGuard is a security-focused virtual private network (VPN) known for its simplicity and ease of use. It uses proven cryptography protocols and algorithms to protect data. Originally developed for the Linux kernel, it is now deployable on Windows, macOS, BSD, iOS and Android.
Why to use WireGuard? We’ve talked about why you should use it in this article.

Summary

We’ve learned 3 different ways to unblock your VPN on any network, and get through any firewall.

The easiest solution is often the best, and you’ll find 90%+ success by using either OpenVPN on port 443, or a VPN with built-in obfuscation technology.

And if after exhausting all options you still find yourself blocked, then go with obfsproxy and Tor as the ultimate unblocker.

Ultrafast Speed

There’s no doubt that almost every gamer has faced the same predicament: you’re enjoying your favorite game while connected to a VPN, and suddenly your connection slows down to an unbearably lagging speed. While VPNs offer security and privacy benefits, they also tend to affect your connection speeds. By using the TrueVPN on WireGuard protocol, however, you can still enjoy the same VPN perks without having to sacrifice your speed. WireGuard offers the fastest VPN speeds when compared to other protocols, making it possible to game securely without interruptions to your connection.

Access to Restricted Games

Ever find that you want to access a new game, but you can’t because it hasn’t been released in your region yet? In order to bypass this pesky block, you can use TrueVPN to hide your true location and make it appear as if you are located somewhere where the game is available.

Lower Latency

Another perk of TrueVPN is that it can potentially lower latency to game servers, Thanks to WireGuard Protocol for that. Internet congestion, especially during high-traffic times, can impact your connection and cause annoying latency issues. TrueVPN provides a better route to the servers you’re trying to connect to while you play so you won’t experience as much interference. 

No More Bans

If you’ve ever made an admin angry and gotten kicked out of a game, you know the struggle is real with this one. Being banned from a game means your IP address is banned. Once you connect to a VPN with TrueVPN, however, your true IP address is hidden and you can play with a different IP address. You can even regularly switch server locations to keep changing your IP address and keep your identity totally hidden.

Protection from DDoS Attacks

Getting hit by what’s known as a DDoS attack can ruin an entire gaming session. A DDoS attack, short for distributed denial of service, happens when your connection is overwhelmed with information in order to block your data from reaching the server, ultimately kicking you out of your game. These attacks are coordinated by third parties who target your IP address right under your nose. The scary part is that just about anyone can launch a DDoS attack—including anyone you may have ticked off in the gaming world. While many ISPs implement protection against these attacks, using TrueVPN adds an extra layer of security that makes your connection virtually bulletproof.

Especially-made Gaming VPN Servers

Using a regular VPN servers for gaming for streaming is not recommended for gamers.
Why? Because these servers aren’t optimized for speed, so by using a regular VPN server for gaming or streaming may effect the performance because these services requires a high-speed VPN servers with at least 1Gbps port.

TrueVPN provides especially-made VPN servers only for Gaming and Streaming, These servers are optimized for speed & performance, of course the connection between the user and these servers are highly encrypted and have the same privacy features as other servers have.

These servers are geolocated, and can be found within TrueVPN app.

Conclusion

If You’re looking for a fast VPN with low latency, Then TrueVPN is your best choice.

So, We’re pleased to introduce our new generation of TrueVPN for iPad

TrueVPN for iPad

Of course with TrueVPN your privacy is always yours, your data will be encrypted and your online browsing will remain completely anonymous, private and secure wherever you are.

For that, And to maximize security and privacy to support more users who loves TrueVPN.
We’ve developed a special release only for iPad users.

The TrueVPN version 2.x and later support an iPad app with the same features as provided to the iPhone & iPod Touch users.

With TrueVPN for iPad, You’ll have the same features which featured for iPhone app, Plus you’ll have extra features just for iPad users, We’ll cover this features down below

TrueVPN’s iPad App’s Extra Features

In addition to the core functionality for TrueVPN, We’re pleased to announce the following features for iPad users.

1. Easy to use UserInterface
2. Motion Detection
3. Multitasking Support
4. Enterprise VPN support
5. Force-Privacy Respect – Block Ads, Trackers & Analytics sites on Safari or even within apps.

New Features for Both iPhone & iPad App

Of course this release comes with more exciting new features for both platforms iOS & iPadOS

• Dark-mode: We’re excited to announce dark-mode support on TrueVPN.
• Firewall Widget: A brand-new widget to control your firewall & AdBlocker
• VPN Protocols: Now, You’ll be able to choose your preferred connection protocols.
• Force Respect: A brand-new mechanism to block trackers & analytics services.
• Speed-test: A Brand-new feature to test your connection speed within the app.
• Trial Period: Try Premium features for 3-days free of charge.
• Enhanced pre-connection checks mechanisms
• Updated filters for TrueBlocker for better Privacy
• Added more +6 especially-made VPN servers for Streaming and Gaming
• Enhanced mechanisms to choose the fastest server automatically
• Widgets improvements
• Connection stability and enhanced firewall rules

Get TrueVPN

Of course you can get TrueVPN for iPhone & iPad for free from Apple’s AppStore.
Requires iOS 11.0 or later. Compatible with iPhone, iPad, and iPod touch.

With Family Sharing set up, up to six family members can use TrueVPN.

Is TrueVPN Available for Android?

Well, As TrueVPN’s focus on security, we do not have an official app yet on Google Play or anywhere else except AppStore, The only official TrueVPN app is available on AppStore.

Why Not Android?

Ok, Let’s be clear, The Android platform was designed to support VPN protocol like PPTP or OpenVPN, While PPTP protocol is not secure enough to grantee the maximum security standards for our users, it can’t be passed though our Quality-Control standards.

If we decides to use OpenVPN to be our primary protocol, users may experience some issues when connecting to our servers due to legal restriction and DPI (Deep Packet Inspection) in some countries like China, Egypt, Syria.

Will TrueVPN Rolls out it’s version for Android Later?

We’re working on it, Our primary focus is to use a secured protocol, so we decided to use WireGuard as our next protocol implementation for an Android app, And of course, We will inform our users if and when that happens.