Best way to obfuscate openvpn data?

OpenVPN data might look like SSL but still can be detected by advances traffic analysis. There is a well known solution for this : Transmit this data using a SSL tunnel. Then, it is almost perfectly undetectable.

Is there a feature in GL Inet to do this? How do we achieve this?

That needs to be supported in both server and client. As we need to be compatible with other service providers, we don’t want to modify and add more patches. As you need to be test with each vendor individually. Well each one may use different implementation, it may not open the protocol to us.

There are better protocols to bypass firewall. Openvpn is not the best solution.

Okay but why could GL-INET openvpn server tunnel not be made compatible just with GL-INET clients?

Regardless, I have two questions:

  1. I wonder why openwrt running in GL Inet routers is missing the obfxproxy package, even though it looks like a supported package by openWRT:
    [OpenWrt Wiki] package: obfsproxy

  2. Looks like tls-auth is supported “out of the box” as a part of openvpn.
    How To Guide: Set Up & Configure OpenVPN Client/server VPN | OpenVPN
    Is it possible to achieve this in GL-INET routers? If yes, how so? I mean like broad steps …

Okay but why could GL-INET openvpn server tunnel not be made compatible just with GL-INET clients?

Regardless, I have two questions:

  1. I wonder why openwrt running in GL Inet routers is missing the obfxproxy package, even though it looks like a supported package by openWRT:
    [OpenWrt Wiki] package: obfsproxy

  2. Looks like tls-auth is supported “out of the box” as a part of openvpn.
    How To Guide: Set Up & Configure OpenVPN Client/server VPN | OpenVPN
    Is it possible to achieve this in GL-INET routers? If yes, how so? I mean like broad steps …