This repository contains a reproducible Docker-based testbed to evaluate the detectability of VPN traffic (baseline WireGuard) and VPN obfuscation techniques (e.g., obfs4, udp2raw) using Suricata IDS, Zeek, nDPI & tcpdump.
docker dpi suricata ids tcpdump ndpi zeek wireguard obfs4 udp2raw zeek-ids shadowsocks-rust vpn-obfuscation
-
Updated
May 4, 2026 - Jupyter Notebook