GoodbyeDPI icon indicating copy to clipboard operation
GoodbyeDPI copied to clipboard

Published 20 hours ago • verified publisher icon ValdikSS

SNI RESET

Open miaomiaosoft opened this issue 5 years ago • 2 comments

I have found some open source projects that can avoid SNI RESET, which are suitable for HTTPS websites.

GoodbyeDPI can avoid the SNI RESET of the HTTP protocol, but cannot do anything about the SNI RESET of the HTTPS protocol ( this is the case in China )

If Russia's network firewall starts the same SNI RESET, you can try them or integrate them into GoodbyeDPI. https://github.com/URenko/Accesser https://github.com/Macronut/SNI-Mask

miaomiaosoft avatar Feb 17 '19 07:02 miaomiaosoft

In China, you can't just ignore TCP RST packets with blacklisted SNI, you need to do additional tricks to forge the packet as it's not a TLS ClientHello.

ValdikSS avatar Feb 17 '19 15:02 ValdikSS

@ValdikSS so is that a China issue or what?

DonaldTsang avatar Dec 04 '19 10:12 DonaldTsang