What is the best way to hide VoIP traffic?

Question

linux

Essence of the question:
There is an Asterisk IP telephony server on CentOS 6 in Belarus. Connected to Megaphone Multiphone. In connection with recent changes in the legislation, such a scheme seems to have become illegal (the wording is extremely incomprehensible, the Internet provider Beltelecom does not know anything). In general, I decided to play it safe and somehow hide the traffic. I see several solutions:

1. VPS (The most normal for me).
   Rent a VPS in Russia and set up some kind of encrypted tunnel to it from my server.
   Advantages: Price; Work stability (?); Settings control.
   Disadvantages: Additional failure node.
   
2. VPN.
   Buy the actual VPN.
   Benefits: Fewer tuning nodes.
   Disadvantages: Prices are strange, they vary a lot; The stability of the work is also in question;
   
3. Move Asterisk to a VPS.
   Well, here, in fact, the same thing as the 1st point, the issue of hiding traffic remains open, unless the server is in another country.
   

In general, I want to get some advice from the community, someone may have already solved a similar problem, which solution, in your opinion, is more correct, convenient. What means of tunneling or something else is better to use? I think if you take a VPS, then make an IPSec tunnel and wrap VoIP into it, or are there other means?

Answer 1

I would solve the problem using method #1. The main thing is to choose a VPS with a good enough channel. It will be more reliable to raise Asterisk there as an IAX2 proxy or siproxd, in addition to IPSEC VPN.
Just clarify - encryption with crypto-resistant algorithms can also be illegal or require additional certification.

Answer 2

1. Who do you want to hide from?
   If you are hiding, then you should not hide in the Russian Federation, but in Ukraine / Poland / the Baltic states. Nearby and may not give up.

Answer 3

1. Server, for example in Selectel. Install Aster2 there, connect to Multifon
2. Set up a VPN with encryption to your server, you can use an intermediate thread in Hetzner or WebZilla (they all sit on trunk channels, pings will be minimal)
3. On your Aster, set up IAX2 to Aster2 with encryption , and routes through this VPN
4. Set up the dialplan.