Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

Outline Toolkit: Build Your Own Defense Against Online Censorship

Junyi YiVinicius Fortuna

PrivacyTalks45 minIntermediateOpen on YouTube ↗

Where

Talks
HOPE XV

Duration

45 min

Shows how the Outline toolkit lets users run their own VPN servers and build blocking-resistant censorship circumvention strategies.

Summary

Online censorship is widespread, and this talk presents Outline, an open ecosystem from Google's Jigsaw group for reaching a free internet. The speakers start with the problem and the Outline Manager and client, which let someone host a personal VPN server and share access keys with friends or colleagues while keeping control of the server.

The middle of the talk turns to developers. The Outline SDK offers reusable, cross-platform libraries for transports, proxy protocols, encrypted DNS, and a user-space VPN stack. Three command-line tools are demonstrated: a resolver, a fetch utility, and an HTTP CONNECT proxy, each able to route through a chosen strategy. Strategies such as TLS client hello fragmentation, DNS over HTTPS, WebSocket encapsulation, and SOCKS5 can be composed into chains. Live demos show traffic moving to a server in Singapore, and a test against a restricted region where a plain request failed until layered techniques were applied.

To close, the speakers explain that testing from a remote vantage point, through a rented server or a cloud provider, is the usual way to learn what is blocked and why. The practical takeaway is that the SDK lets developers add network resilience to their own apps instead of building it from scratch, and the code is open source on GitHub.

Related talks