gfw_resist_tls_proxy icon indicating copy to clipboard operation
gfw_resist_tls_proxy copied to clipboard

Junk Codes instead of delay

Open TheLordOfTheKings opened this issue 1 year ago • 8 comments

Hey @GFW-knocker Is it maybe possible to get rid of the delay mechanism and send Junk fragments between the valid ones instead?

TheLordOfTheKings avatar Apr 26 '23 08:04 TheLordOfTheKings

Can dest server separate these junk fragments from valid ones?

byehack avatar Apr 26 '23 08:04 byehack

Can dest server separate these junk fragments from valid ones?

Yes, they will be dropped if these packets are invalid in any sort of way like with the wrong checksum, seq/ack, etc.

TheLordOfTheKings avatar Apr 26 '23 09:04 TheLordOfTheKings

Yes, they will be dropped if these fragments are invalid in any sort of way like the wrong checksum

Great, needs to be tested, maybe GFW is also drop these incorrect fragments.

byehack avatar Apr 26 '23 09:04 byehack

Tested now. it seems junk fragments also avoid packet to be complete, it prevents next fragments to be accepted by server: upstream: ConnectionAbortedError(10053, 'An established connection was aborted by the software in your host machine', None, 10053, None)

byehack avatar Apr 26 '23 18:04 byehack

Tested now. it seems junk fragments also avoid packet to be complete, it prevents next fragments to be accepted by server: upstream: ConnectionAbortedError(10053, 'An established connection was aborted by the software in your host machine', None, 10053, None)

Please check this repo, it does that and a lot more: https://github.com/ValdikSS/GoodbyeDPI https://github.com/ValdikSS/GoodbyeDPI/blob/master/src/fakepackets.c

TheLordOfTheKings avatar Apr 27 '23 09:04 TheLordOfTheKings

https://github.com/ValdikSS/GoodbyeDPI/blob/master/src/fakepackets.c

it seems that using full packet junks. please check here if you want test junked fragments.

byehack avatar Apr 27 '23 09:04 byehack

@arash88

i see lots of people suggesting https://github.com/ValdikSS/GoodbyeDPI

did you test this project? is it working in iran now?

GFW-knocker avatar Apr 27 '23 19:04 GFW-knocker

@GFW-knocker

Yes, it's working all right. In some cases (SNI filtering) like Youtube, you don't even need a v2ray connection! Although I'm experiencing a noticeable network quality dropping without using a v2ray connection.

TheLordOfTheKings avatar Apr 27 '23 21:04 TheLordOfTheKings