Definition
Anti-DPI, also called obfuscation or stealth technology, is a category of techniques designed to defeat Deep Packet Inspection — the practice of network operators examining packet contents and metadata to classify and filter traffic. In countries with heavy internet censorship, ordinary VPN traffic has a recognizable signature and is routinely blocked. Anti-DPI methods reshape the traffic so it looks like something innocuous, typically ordinary HTTPS web browsing.
Common Techniques
XOR obfuscation applies a bitwise operation to scramble the OpenVPN handshake. Stunnel wraps VPN traffic inside a standard TLS connection on port 443, making it indistinguishable from regular HTTPS. Obfsproxy and obfs4, borrowed from the Tor project, use protocol-aware shaping to remove identifiable patterns. Shadowsocks, originally built to bypass the Great Firewall of China, behaves like a SOCKS5 proxy with encrypted, randomized payload. WireGuard does not natively support obfuscation, so providers wrap it in additional layers like AmneziaWG or Cloak.
When You Need It
Anti-DPI is essential when operating in an environment that actively blocks VPNs: China, Iran, Russia, the UAE, Turkmenistan, certain corporate or campus networks, and hotel Wi-Fi systems that monetize blocking. For a typical user in a country with open internet access, it is unnecessary and adds a small performance penalty. Most reputable providers offer it as an opt-in setting, often labeled 'Stealth,' 'Camouflage,' 'NoBorders,' or 'Obfuscated Servers.'