Traffic shape obfuscation when using an encrypted network connection

A computer system for obfuscating a traffic pattern associated with a plurality of network traffic within a tunnel connection, comprising:

• one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage medium, and program instructions stored on at least one of the one or more tangible storage medium for execution by at least one of the one or more processors via at least one of the one or more memories, wherein the computer system is capable of performing a method comprising:
• detecting the tunnel connection;
• analyzing a connection environment associated with the detected tunnel connection;
• determining a packet handling technique based on the analyzed connection environment, wherein the packet handling technique provides a way for creating a noise packet that will be discarded by a network stack at a target node or before the target node;
• determining a noise strategy based on the determined packet handling technique;
• and
• sending a plurality of noise packets into the tunnel connection based on the determined noise strategy to obfuscate the traffic pattern.

A computer program product for obfuscating a traffic pattern associated with a plurality of network traffic within a tunnel connection, comprising:

• one or more computer-readable storage medium and program instructions stored on at least one of the one or more tangible storage medium, the program instructions executable by a processor, the program instructions comprising:
• program instructions to detect the tunnel connection;
• program instructions to analyze a connection environment associated with the detected tunnel connection;
• program instructions to determine a packet handling technique based on the analyzed connection environment, wherein the packet handling technique provides a way for creating a noise packet that will be discarded by a network stack at a target node or before the target node;
• program instructions to determine a noise strategy based on the determined packet handling technique;
• and
• program instructions to send a plurality of noise packets into the tunnel connection based on the determined noise strategy to obfuscate the traffic pattern.