mirror/naiveproxy
1
0
Fork 0
mirror of https://github.com/klzgrad/naiveproxy.git synced 2024-11-28 00:06:09 +03:00
Code Issues Projects Releases Wiki Activity
Make a fortune quietly
33 Commits 65 Branches 132 Tags 340 MiB
C++ 81.4%
Python 14.1%
C 1.5%
Objective-C++ 1.1%
Starlark 0.5%
Other 1.2%
b1ca5178f2
Go to file
klzgrad b1ca5178f2
Fix option parsing 
Fix parsing of socks://ip:port, which got parsed to socks://ip.

Also, path cleanup in CI configs. Use prebuilt gn binaries for all platforms, which failed to build on MacOS for unclear reason.
2019-01-14 22:13:26 -05:00
src Fix option parsing 2019-01-14 22:13:26 -05:00
tools Add source import tool 2019-01-14 09:47:17 -05:00
.appveyor.yml Fix option parsing 2019-01-14 22:13:26 -05:00
.gitignore Add .gitignore 2019-01-14 09:47:17 -05:00
.travis.yml Fix option parsing 2019-01-14 22:13:26 -05:00
CHROMIUM_VERSION Add source import tool 2019-01-14 09:47:17 -05:00
LICENSE Add LICENSE 2019-01-14 09:47:17 -05:00
README.md Add README 2019-01-14 09:47:17 -05:00

README.md

NaiveProxy

A secure, analysis-resistent proxy framework.

The primary security goal is availability in presence of pervasive censorship. Nevertheless, privacy and integrity are simultaneously achieved through implementations of TLS best practices.

The main attacks considered:

  • Website fingerprinting / traffic classification: mitigated by traffic multiplexing in HTTP/2.
  • TLS parameter fingerprinting: defeated by using identical behaviors from Chromium's network stack.
  • Active probing: defeated by application fronting, using a common frontend with application-layer routing capability, e.g. HAProxy.
  • Length-based traffic analysis: mitigated by length padding.

There are three setups:

  • The portable setup doesn't ask you to build any code or run anything client-side, but it is prone to traffic analysis due to lack of length padding. See Linux Quick HOWTO.
  • The fast setup improves performance by having a client. See "Fast client" in Linux HOWTO.
  • The resistent setup implements length padding upon the fast setup by requiring an extra server. See "Obfuscated tunnel" in Linux HOWTO.

The application is entirely based on Chromium's code base and build system. The master branch contains a minimal set of files that are changed from Chromium stable, for ease of code review. The version branches contain a minimized but still large buildable codebase with the same changes.