Bypassing DPI with eBPF sock_ops

The problem A site I wanted to open never loaded. The TLS handshake stalled. Somewhere upstream, a middlebox was reading the SNI in my ClientHello and dropping the connection. DNS was the other half. Even if you slip past the DPI, the resolver hands you a fake IP that lands on a block page. So both have to be dealt with. Most fixes mean a VPN or a proxy. I didn&rsquo;t want either. A VPN sends…