To-do List

[ValdikSS]

• [x] IPv6 support
• [ ] Option to disable Connection: close header check for passive blocker
• [x] Option to add additional ports for Window Size modification
• [ ] Tray icon
• [x] White/black lists
• [x] Make Host value randomly MixedCase ~Make SNI value randomly MixedCase~
• [ ] Drop first HTTP Redirect packet which looks like forged redirect*
• [x] DNS redirection
• [ ] Per-site HTTP configuration
• [ ] Automatic HTTP tricks compatibility detection

Optional:

• [x] Run as Windows Service
• [x] New DPI TCP connection cloak techniques.

Long-term:

• [ ] Implement GUI
• [ ] Linux and Mac OS port

• the website would handle this as a dropped packet and re-transmit it. DPI won't retransmit forged packet.

[miaomiaosoft]

Hello there! I live in China, The internet censorship and blockade here are equally serious, Some people say that Russia introduced the notorious firewall technology from China, But luckily I found GoodbyeDPI, It applies to my network, Can break through most of the blockade, Although there are several sites will be abnormal, But this is very good! At the same time I am looking forward to the white list function.

Thank you very much, great job!

[ValdikSS]

@miaomiaosoft Glad to hear that, but please don't post information off the ticket topic.

[ValdikSS]

Make Host value randomly MixedCase Implemented in commit c7905f0b317c48ce8b0feb7601461abd24966b42

[ValdikSS]

Make SNI value randomly MixedCase SNI can't be modified without TLS termination as it got verified in TLS handshake.

[ValdikSS]

Option to add additional ports for Window Size modification Implemented in commit 61e39bc095f02be6daf279e57f3038a3c17e9cc1 & 9b9be302cbe22ef647fa567c4cbe191be9991cbe

[ValdikSS]

DNS redirection Implemented in commit a182f52207959b9bbf5ed5a1afa4d1b3a2adfc2b (experimental)

[ValdikSS]

Tray icon Tray icon is implemented (not yet commited)

[ValdikSS]

Blacklist Implemented in commit bfed8638e58401fd725c6274e9bf65672c4f34ec

[hooddy]

I'm vote for Windows Service.

[ValdikSS]

New DPI TCP connection cloak technique HTTP Persistent (keep-alive) fragmentation. Implemented in commit 582503452f1276d608f2ece128f128d8b7e2d53c

[ValdikSS]

Windows Service support Implemented in commit 23babdc8facff4cc9528bcace843e79615d2676f

[ValdikSS]

IPv6 support Preliminary IPv6 support has been added into ipv6 branch, not yet merged.

[sgeto]

Any update on the tray icon feature?

[ValdikSS]

@sgeto It's probably won't be commited. I decided to make proper GUI.

[sgeto]

That's great. It would be nice though if the GUI could be minimized to the system tray.

[ValdikSS]

Full IPv6 support is commited to ipv6 branch, merged with master branch.

[KOLANICH]

Do we really need DNS redirection in GDPI? Why not just use dnscrypt (it has a chicken & egg problem: if it cannot resolve names of dns servers it stops working, this definitely needs to be fixed, but I guess for this use case it doesn't make much trouble) for that?

[ValdikSS]

@KOLANICH, redirecting UDP DNS queries is easy to implement with WinDivert. Dnscrypt is another third-party software and protocol.

[KOLANICH]

@ValdikSS I know. But since encrypted and authenticated communications are better than unencrypted or authenticated I guess this is unneeded. I have encountered a network where all DNS queries, no matter if they targeted to ISP's or other DNS server, were answered by ISP's one. DNSCrypt have solved this problem.

[ValdikSS]

@KOLANICH, I know about this issue, that's why cmd file contains Yandex DNS on unusual 1253 port by default. It's less likely this port will be redirected to ISP's DNS server.

[mguludag]

@ValdikSS i forked GUI for GoodByeDPI then i added scheduling feature and merged with dnscrypt-proxy in one UI https://github.com/cheytacllc/GUI-for-GoodbyeDPI

[rawaludin]

Thanks for this! I really hope the mac version could be released, I can't do C though so can't help much :(

[Am1nCmd]

hey dude, is there any update goodbyeDPI for macOS?