Page 1 of 1

Suggestion: VPN over ICMP

Posted: Wed Aug 28, 2019 12:07 am
by mikruser
Hello,
Please implement VPN over ICMP (ICMP Tunnel)
(it can be very useful in some countries with a totalitarian regime)))

Re: Suggestion: VPN over ICMP

Posted: Wed Aug 28, 2019 12:18 am
by sebastia
Hello
From high-level point of view, there would be little difference between udp. And high stream of large icmp packets would be a red flag on it's own.
Furthermore, some networks / routers perform icmp "optimisation" / rate limiting, which would result in high packet loss.

So far from stealthy.

Ps: if stealth is needed, hide in plain sight -> ssl based vpn, as almost everything is using it nowadays.

Re: Suggestion: VPN over ICMP

Posted: Wed Aug 28, 2019 1:27 am
by jspool
Hello
From high-level point of view, there would be little difference between udp. And high stream of large icmp packets would be a red flag on it's own.
Furthermore, some networks / routers perform icmp "optimisation" / rate limiting, which would result in high packet loss.

So far from stealthy.

Ps: if stealth is needed, hide in plain sight -> ssl based vpn, as almost everything is using it nowadays.
Absolutely correct. ICMP is commonly filtered and would not be a reliable method of connectivity.

Re: Suggestion: VPN over ICMP

Posted: Fri Nov 01, 2019 3:10 pm
by mikruser
Absolutely incorrect.
Normal providers do not touch transit icmp traffic.