ccsexyz comments

Results 8 comments of


                                            ccsexyz

General UDP tunnel?

the openvpn client will use socks5 udp feature if you set the socks5 proxy and udp protocol

Possibility of downgrading into null-cipher at the sender's discretion

Great Idea.

Possibility of downgrading into null-cipher at the sender's discretion

I don't think splice can be used to move data between two sockets. http://man7.org/linux/man-pages/man2/splice.2.html ` splice() moves data between two file descriptors without copying between kernel address space and user...

Possibility of downgrading into null-cipher at the sender's discretion

Actually I implemented an echo server using splice.But, I think it's meaningless for ss and It just brings additional complexity. 1. many platforms don't have splice. 2. memory copying isn't...

Possibility of downgrading into null-cipher at the sender's discretion

Maintaining two code sets is the complexity I said. I think we should focus on reducing unnecessary encryption.In my practice, partially encrypt https can save about 50% cpu.

Possibility of downgrading into null-cipher at the sender's discretion

`End-points could use policy like "drop encryption after 4kb for port 443".`

Add a feature and encryption method comparison table

Netfilter TCP redirect