Hilton Chain
369269a128
Update README.md
2020-06-30 21:24:58 +08:00
klzgrad
e5ee063787
Update USAGE.txt
2020-06-26 11:45:16 +08:00
klzgrad
a3a09a9322
Update USAGE.txt
2020-06-20 14:16:26 +08:00
klzgrad
8f5b1e4611
Fix extra-headers parsing in JSON config
2020-06-20 14:16:12 +08:00
klzgrad
e8e4f772a3
Remove force padding option
2020-06-16 20:45:24 +08:00
klzgrad
855846fcee
Update README.md
2020-06-16 20:36:30 +08:00
klzgrad
541613921f
Update README.md
2020-06-16 20:32:50 +08:00
klzgrad
38fc123c16
Update README.md
2020-06-16 20:19:15 +08:00
klzgrad
6f4bc52250
h2: Pad RST_STREAM frames
...
Clients sending too many RST_STREAM is an irregular behavior.
Hack in a preceding END_STREAM DATA frame padded towards [48, 72]
before RST_STREAM so that the TLS record looks like a HEADERS frame.
The server often replies to this with a WINDOW_UPDATE because padding
is accounted in flow control. Whether this constitudes a new irregular
behavior is still unclear.
2020-06-13 18:04:01 +08:00
klzgrad
82d2420d08
Raise initial padding number to 8
...
Protect initial handshake lengths.
Common client initial sequence:
- TLS: ClientHello
- TLS: ChangeCipherSpec, Finished
- H2: Magic, SETTINGS, WINDOW_UPDATE
- H2: HEADERS: GET
- H2: SETTINGS ACK
Common server initial sequence:
- TLS: ServerHello, ChangeCipherSpec, ...
- TLS: Certificate, ...
- H2: SETTINGS
- H2: WINDOW_UPDATE
- H2: SETTINGS ACK
- H2: HEADERS: 200 OK
2020-06-13 18:04:01 +08:00
klzgrad
179992dfa8
Fix tests
2020-06-13 18:04:01 +08:00
klzgrad
4d627002e5
Negotiate padding capability automatically
...
Client: On the first connection does a full Open and detects if the
server supports padding by checking for "Padding" header in the
response. Applies padding if the server does. In the following
connections it's back to Fast Open.
Server: Detects if the client supports padding by checking for "Padding"
header in the CONNECT request. Applies padding if the client does.
Both client and server always send "Padding" headers to somewhat protect
the request and response headers' packet lengths, even if the other side
may not acknowledge padding negotiation, either due to old version or
"Padding" headers being dropped by the frontend.
The manual option --padding is removed.
2020-06-13 18:04:01 +08:00
klzgrad
cc7da21ff6
Update README.md
...
Strategically reduce the amount of self-promotion.
2020-06-04 20:56:07 +08:00
klzgrad
e32a3afb76
Prevents padding headers from being indexed
2020-05-24 13:59:27 +08:00
klzgrad
82ee10795f
Add option for concurrent transport
...
Useful only for high-end situations where a single connection
is throttled at 10MB/s somehow.
Makes traffic obfuscation less secure.
2020-05-21 23:38:04 +08:00
klzgrad
a60d168fb5
socket: Support NetworkIsolationKey in RawConnect
2020-05-21 22:19:54 +08:00
klzgrad
af5216e763
Add --extra-headers option
2020-05-21 01:48:54 +08:00
klzgrad
70502546ba
Add cert net fetcher
2020-05-21 01:48:54 +08:00
klzgrad
e58e84116f
Add continuous integration and tests
2020-05-21 01:48:54 +08:00
klzgrad
63a298fc00
Document usage of redir://
2020-05-21 01:48:54 +08:00
klzgrad
ff96e247c0
Redirect DNS for redir://
...
Run a fake stub DNS resolver at the same port with redir://.
2020-05-21 01:48:54 +08:00
klzgrad
62e5e9cfff
Handle payload data immediately after HTTP headers
...
In HttpProxySocket there can be data immediately after HTTP headers,
as in the case of fast HTTP CONNECT.
Instead of reporting an error, handle this case by returning
the data after HTTP headers in the next Read() call.
2020-05-21 01:48:54 +08:00
klzgrad
75c9bab359
Support TCP transparent proxying
...
Enable with naive --listen=redir:// and iptables ... -j REDIRECT
--to-ports 1080.
2020-05-21 01:48:54 +08:00
klzgrad
4aab76466a
Add README
2020-05-21 01:48:54 +08:00
klzgrad
0b0635ca6b
Add LICENSE
2020-05-21 01:48:54 +08:00
klzgrad
fd4e46e55a
Add source import tool
2020-05-21 01:48:54 +08:00
klzgrad
541650e5a6
Add .gitignore
2020-05-21 01:48:54 +08:00
klzgrad
1459bcde6d
Add example config.json
2020-05-21 01:48:54 +08:00
klzgrad
4a488262e4
Support loading config.json
2020-05-21 01:48:54 +08:00
klzgrad
90b9b1e253
Add QUIC client
2020-05-21 01:48:54 +08:00
klzgrad
c6a3a86255
Add http_proxy_socket to BUILD.gn
2020-05-21 01:48:54 +08:00
klzgrad
52248bfb94
Add server implementation and tunnel padding
2020-05-21 01:48:54 +08:00
klzgrad
a9ca34957c
Add build scripts
2020-05-21 01:48:54 +08:00
klzgrad
96e6eff31c
Add Naive client to BUILD.gn
2020-05-21 01:48:54 +08:00
klzgrad
49c1b95fb3
Add initial implementation of Naive client
2020-05-21 01:48:54 +08:00
klzgrad
0e6911492c
build: Add sysroot creator script
2020-05-21 01:48:54 +08:00
klzgrad
b29cc4d57c
build: Remove sysroot pipewire workaround
2020-05-21 01:48:53 +08:00
klzgrad
2da61459fa
build: Pass extra flags to gcc toolchains
2020-05-21 01:48:53 +08:00
klzgrad
14d0110c73
build: Add OpenWrt toolchain definitions
2020-05-21 01:48:53 +08:00
klzgrad
fa7c26b100
build: Support MIPS -mtune= flag
2020-05-21 01:48:53 +08:00
klzgrad
adfa3a6c92
build: Support ARM -mcpu= flag
2020-05-21 01:48:53 +08:00
klzgrad
81e4b25181
build: Don't use sysroot for host_toolchain
...
protoc should be built with the host toolchain, usually not needing
the sysroot.
2020-05-21 01:48:53 +08:00
klzgrad
85a1453774
build: Support non-standard ldso in executables
2020-05-21 01:48:53 +08:00
klzgrad
69f1e99f69
allocator: Improve MIPS coverage of spinlocks
2020-05-21 01:48:53 +08:00
klzgrad
9a54dd5bc6
debug: Fix obsolete max check
2020-05-21 01:48:53 +08:00
klzgrad
26ed96675e
debug: Fix uClibc macro condition
2020-05-21 01:48:53 +08:00
klzgrad
24a4eee606
process: Remove use of mallinfo under Musl
2020-05-21 01:48:53 +08:00
klzgrad
0db73e0865
trace_event: Remove use of mallinfo under Musl
2020-05-21 01:48:53 +08:00
klzgrad
f93b1e3427
udp: Fix mmsghdr struct initializer
...
On OpenWrt x64 there are paddings fields in the struct, making
the initializer list not work.
2020-05-21 01:48:53 +08:00
klzgrad
b3d6ef8441
dns: Support Musl
2020-05-21 01:48:53 +08:00
