httpRelay icon indicating copy to clipboard operation
httpRelay copied to clipboard

Can we add -bypasslist function?

Open rampageX opened this issue 5 years ago • 5 comments

The list file with -bypasslist parameter is a domain list or CIDR format file, all ip range and(or) domains in this file bypass proxy.

rampageX avatar Apr 12 '20 03:04 rampageX

Could you clarify what the goal is that you have in mind? (What are you trying to accomplish?)

For example, if I understand correctly, you're requesting to have a list of addresses for which we should not use the proxy server. An example would be the Firefox setting 'No proxy for' text field, where you can enter multiple addresses. Correct?

If so, I would think this is solved in the client that accesses the proxy.

cobratbq avatar Apr 12 '20 17:04 cobratbq

I means bypass by country with CIDR format List:

1.0.1.0/24 1.0.2.0/23 1.0.8.0/21 1.0.32.0/19 1.1.0.0/24 1.1.2.0/23 1.1.4.0/22 1.1.8.0/21 1.1.16.0/20 1.1.32.0/19 1.2.0.0/23 1.2.2.0/24 1.2.4.0/22 1.2.8.0/21 1.2.16.0/20 1.2.32.0/19 1.2.64.0/18 1.3.0.0/16 1.4.1.0/24 1.4.2.0/23 1.4.4.0/22 1.4.8.0/21 1.4.16.0/20 1.4.32.0/19 1.4.64.0/18 1.8.0.0/16 1.10.0.0/21 1.10.8.0/23 1.10.11.0/24 1.10.12.0/22 1.10.16.0/20 1.10.32.0/19 1.10.64.0/18 ...

2020-04-13_075936

Clients like Firefox/Chrome support address but not CIDR format, and enter so many addresses on each client is a painful process, especially on mobile clients.

I can run httpRelay on the gateway if it's support this bypass list and all clients get work.

rampageX avatar Apr 13 '20 00:04 rampageX

If I understand you correctly, the bypass list would only make sense for relay, that is: all connections go through relay proxy, but relay chooses to connect directly if address is in the bypass-list, or to relay through SOCKS proxy if not in bypass-list. (Note: the client will always use the relay proxy.)

For proxy, that is the normal proxy server, it does not make sense, because a client already connects to the proxy server and the proxy already establishing a connection directly.

Do I understand your request correctly?

cobratbq avatar Apr 18 '20 00:04 cobratbq

Yes, that's exactly it!

rampageX avatar Apr 18 '20 11:04 rampageX

I've been considering your request. The request seems simple enough, although I am not sure if it will match domain names if you specify only a list of CIDRs for bypassing. It depends on at what time domain names are resolved. I'll need to investigate that first.

cobratbq avatar Apr 24 '20 19:04 cobratbq