Obfuscation is a technique for disguising the protocol signature of a connection so that DPI systems cannot identify and block it.
Explanation
When DPI fingerprints WireGuard or OpenVPN packets, an obfuscated version wraps those packets in another protocol that looks like something else — usually plain HTTPS or WebSocket to a common domain. Shadowsocks, V2Ray, and Trojan are three widely-used obfuscated transports. Tor uses pluggable transports (obfs4, meek, snowflake) for the same purpose. Obfuscation adds overhead — extra encapsulation, sometimes extra hops through a relay — but is the difference between a working circumvention tool and a blocked one in DPI-heavy environments. Web proxies over HTTPS to a well-known domain get most of the same benefit without needing an obfuscation layer: the connection already looks like ordinary HTTPS.
Related terms