Anyone using Zapret with Jio AirFiber?

[gmaster]

As the title suggests, I want to know if anyone is using Zapret (or other DPI circumvention tool) with Jio AirFiber and how is the experience.

My openwrt router is directly connected to the C6 antenna, bypassing the IDU completely. Running SQM with CAKE and everything's smooth. Google Meet conferences, live streaming and Jio TV+ all working fine, even day to day browsing seems snappier than my wired Hathway fiber connection. For this month, I didn't recharge my Hathway account and have been using Jio only. I can open blocked sites with Opera. I have my own Adguard Home dns server also. Now I am wondering if there's any real benefit in using Zapret? How much is the CPU load? I have plenty of RAM in the router left but my CPU is weaker and I fear it will be the bottleneck. If there's real benefit, I may upgrade to a better router or a NanoPi.

 

[x86_64]

Now I am wondering if there's any real benefit in using Zapret?

You don't need it for Jio and Airtel and theres no benefit, can't comment about other ISPs.
They do basic DNS, SNI block.
Atmost Jio drops packets to entire range of blacklisted IPs such as 66.254.114.0/24 which you can only bypass using VPN.

Privacy Focused Browser(with adblock functionality builtin or uBlock) + Encrypted DNS(with adblocking and TIF feed) + HTTPS automatic upgrades(with no fallback) + using VPN for accessing questionable websites is what you should do.

 

[DDDAA]

@gmaster Sorry for going a bit off-topic. I noticed you mentioned bypassing the AirFiber IDU—could you please share how you did it? If possible, a brief guide or a separate post would be really helpful. Thanks in advance!

 

[f0r3he4d]

best you do it on clients than whole network.

 

[gmaster]

Thanks for your inputs guys.

@DDDAA There are already threads regarding this. So I am just keeping it short here as there is nothing much to do actually, assuming you already use openwrt (pfsense would also work). I just connected the ethernet cable coming from Jio's ODU directly to my router's wan port.
1. Deleted all wan interface first.
2. Created a new interface in wan with vlan id 1015 and changed the mac id to IDU's mac.
3. Configured ipv6 with dhcpv6 binding to that newly created wan.1015 interface.
4. Ipv6 worked immediately. Changed the ipv6 dns to cloudflare and google dns64 addresses.
5. For ipv4, I installed '464xlat' and 'map' package. Restarted the wan6 interface (or reboot the router). A new virtual interface with 464xlat came up for ipv4 connectivity.

Even if you don't use openwrt or pfsense, you can still follow step 1 to 4 in any vlan aware router for ipv6 connectivity (personally tested this). Dns64 should allow for normal ipv4 browsing over ipv6 only connection. But file sharing (downloading/uploading) to/from ipv4 sites will falter.

Hope that helps.