GFW Resist TLS Proxy

[MortThePersian]

Dear RPRX;

I just came across this article,

https://github.com/GFW-knocker/gfw_resist_tls_proxy

& I felt it had to be shared with you ASAP !

Sincerely

[us254]

https://github.com/ValdikSS/GoodbyeDPI

https://github.com/SadeghHayeri/GreenTunnel

https://github.com/nemolian/nosni_proxy

[MortThePersian]

May The God's richest blessings shines upon the Knights who combat the darkness

[RPRX]

这种方式完全适用我十天前的一条评论：#1906 (comment)

简单来说，可以用，但不适合大范围推广，若引起了 GFW 的注意，很快它就会被检测到

因为正常的 TLS 流量并不会把 Client Hello 分成多个帧发送，找不到任何合理的解释，GFW 只需检测这一点即可抓到它

[RPRX]

@GibMeMyPacket

1. 请检查 yahoo.com 是否有“默认证书”：https://t.me/projectXtls/78
2. 若有，报错大概率是因为你没有重启服务端

[laaArmy]

But recently it's (actually I'm) facing net/http: TLS handshake timeout time to time in an specific ISP, especially at the peak of internet usage! This is like about 2 URL tests ends up with that error at those times (more at mornings) and the whole for proxy doesn't work till i get about 3 net/http: TLS handshake timeout Tried several to many SNI, all the same.

请提供更多的信息，比如是 Vision 还是 H2 / gRPC，并在下次发生这种情况时看一下服务端有没有收到请求

REALITY 还有一些隐藏玩法，比如目标网站有默认证书时，你可以使用任意 SNI、无 SNI，可以试一试

无 SNI：需要 Xray-core v1.8.1+，服务端 serverNames 加一个 ""，客户端 address 为 IP、serverName 为 "" 即可

话说...任意SNI...是不是可以免流了额

同问，免流复活了，目测

[A5DkjGQUZx]

This approach works perfectly for a comment I made ten days ago: #1906 (comment)

In short, it can be used, but it is not suitable for large-scale promotion. If it attracts the attention of GFW, it will be detected soon

Because normal TLS traffic does not send Client Hello into multiple frames, there is no reasonable explanation, and GFW only needs to detect this to catch it

Agree, but can be a tool available for us in our arsenal

[RPRX]

#2000 (comment)

[seanozman]

But recently it's (actually I'm) facing net/http: TLS handshake timeout time to time in an specific ISP, especially at the peak of internet usage! This is like about 2 URL tests ends up with that error at those times (more at mornings) and the whole for proxy doesn't work till i get about 3 net/http: TLS handshake timeout Tried several to many SNI, all the same.

请提供更多的信息，比如是 Vision 还是 H2 / gRPC，并在下次发生这种情况时看一下服务端有没有收到请求
REALITY 还有一些隐藏玩法，比如目标网站有默认证书时，你可以使用任意 SNI、无 SNI，可以试一试
无 SNI：需要 Xray-core v1.8.1+，服务端 serverNames 加一个 ""，客户端 address 为 IP、serverName 为 "" 即可

话说...任意SNI...是不是可以免流了额

同问，免流复活了，目测

澳洲免流，有人弄过吗？