Tree: cda71e0c61

EgorWeders-patch-1

ipv6

master

masterv6

more-fakes

openvpn

quic_block

test_windres

windivert-test

windivert2

0.0.1

0.0.2

0.0.3

0.0.4

0.0.5

0.0.6

0.0.7

0.0.8

0.0.9

0.1.0

0.1.1

0.1.2

0.1.2rc1

0.1.2rc2

0.1.2rc3

0.1.3

0.1.4

0.1.5

0.1.5rc1

0.1.5rc2

0.1.5rc3

0.1.6

0.1.7

0.1.8

0.2.0

0.2.1

0.2.2

0.2.3rc1

0.2.3rc2

0.2.3rc3

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'cda71e0c61'

${ noResults }

Commit Graph

60 Commits (cda71e0c61d91c07333af543c8de49116acc5684)

Author	SHA1	Message	Date
SashaXser	cda71e0c61	Update goodbyedpi.c	2 years ago
SashaXser	110ba354d8	Update goodbyedpi.c	2 years ago
SashaXser	00e246a372	Update goodbyedpi.c	2 years ago
SashaXser	80650937e3	Update goodbyedpi.c	2 years ago
SashaXser	eda1d53bec	Update goodbyedpi.c	2 years ago
mohadangKim	54349a1c31	fix memcpy usage	3 years ago
ValdikSS	4f18a73239	Print correct set-ttl/auto-ttl mode in the status	3 years ago
ValdikSS	67629fb6ef	Disable auto-ttl if set-ttl has been used after auto-ttl	3 years ago
ValdikSS	27a6d256f0	Handle HTTP GET and POST in packets larger than --max-payload If --max-payload 1200 is used and there's HTTP request with lots of cookies which exceed 1200 bytes in size, this packet would have been skipped as 'too large', and the circumvention won't be applied. Fix this by checking for "GET " or "POST" in the beginning of the packet regardless of its size.	3 years ago
ValdikSS	99c403ca62	GoodbyeDPI v0.2.2	3 years ago
ValdikSS	6ee4101f58	Fix --set-ttl when used with --min-ttl	3 years ago
ValdikSS	55a3a94065	Handle "0" in domain names	3 years ago
ValdikSS	1cfd2b1b9f	Allow to set --max-payload to zero	4 years ago
ValdikSS	871670845f	Document forgotten --max-payload in -5 and -6 modes (v0.2.0+)	4 years ago
ValdikSS	4a8f7ac4fb	Call WinDivertShutdown on shutdown	4 years ago
ValdikSS	ee4ce8893c	Initial support for WinDivert 2.0+ This patch adds WinDivert 2.0+ support in a backward-incompatible way. WinDivert 1.4 won't work after this commit anymore.	4 years ago
ValdikSS	406cf2ca68	GoodbyeDPI v0.2.1	4 years ago
ValdikSS	277b1fb4ef	SNI extraction bugfix: add forgotten hyphen as an allowed domain character This fixes --allow-no-sni option for domains with hyphen.	4 years ago
ValdikSS	5494be72ba	GoodbyeDPI v0.2.0	4 years ago
ValdikSS	f97a2d04f0	Use --max-payload-size=1200 for -5 and -6 modes.	4 years ago
ValdikSS	d7c681d1a2	Add Max Payload Size limit option (`--max-payload-size`) This option excludes TCP packets with the data payload larger than defined value from being copied by WinDivert driver to GoodbyeDPI. As most of HTTP and TLS ClientHello packets are repatively small, and file transfers are usually big and are sent/received using the whole available MTU/MSS, we can just exclude them from being processed by our userspace program to reduce unnecessary CPU load.	4 years ago
ValdikSS	cc1676ad92	--allow-no-sni option. Useful with --blacklist and undetectable SNI. This option is added specially for protonmail.com, as it sends low Window Size in SYN-ACK for requests from Russia, to force the client to fragment the packet. GoodbyeDPI doesn't do reassembling and can't extract SNI in this case, thus won't circumvent the censorship if --blacklist option is used.	4 years ago
ValdikSS	7f59593a28	Check TLS Handshake ClientHello byte if packet length is enough	4 years ago
ValdikSS	372cc6a45d	Properly handle Native Fragmentation packet of bigger or equal size than the fragment size	4 years ago
ValdikSS	46c4f36de8	Add Fake Packet maximum TTL limit to Auto TTL mode This patchset adds maximum TTL size of the fake packet to be sent, to further improve compatibility with asymmertic routing and non-standard TTL value set on servers.	4 years ago
ValdikSS	8911e459d8	Exit when native fragmentation is enabled but http/https values are not set	4 years ago
ValdikSS	f4edcf7b4f	Small text output enhancements	4 years ago
ValdikSS	bb8bafb663	Add Auto TTL range adjustment, introduce min-ttl and use it for --set-ttl as well.	4 years ago
ValdikSS	e25d7432de	Better Auto TTL adjusting algorithm which honors short distance Say you set --auto-ttl to 4. If the TTL distance to the destination host is too short, say 6, auto-ttl would decrease it by 4 and send a fake packet with TTL 2, which is too low for the packet to travel via DPI system. But if you set --auto-ttl to a lower value such as 2, that may introduce issues over long lines where outgoing-path TTL and incoming-path TTL may have difference more than 2 hops due to higher chance of assymetric routing along the path. To solve this issue, this commit introduce auto-ttl range of two values. If the incoming TTL distance is more than autottl2, it is subtracted by autottl2 value. If the distance is less than autottl2, the distance value is used as a normalized weigth of [autottl1; autottl2] scale. The simplified formula is as follows: 128 > extracted_ttl > 98: // Server is running Windows nhops = 128 - extracted_ttl 64 > extracted_ttl > 34: // Server is running Linux/FreeBSD/other nhops = 64 - extracted_ttl if (nhops - autottl2 < autottl2) ttl_of_fake_packet = nhops - autottl1 - trunc((autottl2 - autottl1) * ((float)nhops/10)); else ttl_of_fake_packet = nhops - autottl2	4 years ago
ValdikSS	67c226dc7c	Fix all types and warnings	4 years ago
ValdikSS	6eec99e874	GoodbyeDPI v0.1.8	4 years ago
ValdikSS	fc15088c33	Fix spelling	4 years ago
ValdikSS	1ea70f9bc9	Do not print "Error receiving packet!" upon exiting	4 years ago
ValdikSS	ed42c5d627	Fix all the warnings and notes	4 years ago
ValdikSS	9fcf097cb7	Use Auto TTL = 4 by default Previous value of 2 caused issues with the services connected via very different uplink/downlink routing links.	4 years ago
ValdikSS	a5c2f9fac9	Introduce -5 and -6 modes and make -5 default Modern modesets (more stable, more compatible, faster): -5 -f 2 -e 2 --auto-ttl --reverse-frag (this is the default now) -6 -f 2 -e 2 --wrong-seq --reverse-frag	4 years ago
ValdikSS	11c322aaed	Show fragmentation value issues only when Window Size is used	4 years ago
ValdikSS	b45b463d51	Update readme	4 years ago
ValdikSS	80fcd9c5cf	Replace required/optional brackets in the readme	4 years ago
ValdikSS	21ff80b43c	Automatic TTL value picker for --set-ttl Fake Packet mode This is a per-connection (per-destination) automatic TTL adjusting feature. Basically a --set-ttl mode where you don't need to set specific TTL value. It works as follows: 1. All incoming SYN/ACKs (the response to client's SYN) are intercepted 2. TTL value is extracted from SYN/ACK 3. New TTL is calculated with the simple formula: 128 > extracted_ttl > 64: // Server is running Windows fakepacket_ttl = 128 - extracted_ttl - decrement 64 > extracted_ttl > 34: // Server is running Linux/FreeBSD/other fakepacket_ttl = 64 - extracted_ttl - decrement 4. Fake packet is sent To comply with the multi-path multi-hop server connections where 1 hop dispersion is not rare, decrement should be at least of value "2", which is the default. The patch does not process "too strange" TTL values (bigger than 128, less than 34).	4 years ago
ValdikSS	bbb6af89fe	New Fake Packet circumvention method: wrong SEQ/ACK numbers This method sends Fake Packet with the TCP SEQ/ACK numbers "in the past": -66000 is used for ACK (right out of the ACK permissive window in Linux stack), -10000 is used for SEQ (without any reasoning). This method is pretty effective in Russia. It also could be handy in a networks which prohibit changing TTL values (mobile networks with tethering block/premium feature).	4 years ago
ValdikSS	b9682ac222	Print parsed hostnames in DEBUG mode	4 years ago
ValdikSS	35c6e401db	Handle TLS SNI in blacklist option Now blacklist applies not only to HTTP websites, but also to HTTPS. Fixes #213	4 years ago
ValdikSS	cf7d1c69e0	Add TLS Server Name Indication (SNI) extractor	4 years ago
ValdikSS	7d50748e2e	GoodbyeDPI version 0.1.7	4 years ago
ValdikSS	e28cb52645	Send native-fragged fragments in the reversed order Some websites (or more precisely, TLS terminators/balancers) can't handle segmented TLS ClientHello packet properly, requiring the whole ClientHello in a single segment, otherwise the connection gets dropped. However they still operate with a proper TCP stack. Cheat on them: send the latter segment first (with TCP SEQ "in the future"), the former segment second (with "current" SEQ), allowing OS TCP stack to combine it in a single TCP read(). This fixes long-standing number of TCP fragmentation issues: Fixes #4, #158, #224, #59, #192 and many others.	4 years ago
ValdikSS	e3638786da	Add Native Fragmentation support (without window size) This patch adds `--native-frag` option for userspace TCP segmentation (packet splitting), without shrinking TCP Window Size in SYN/ACK. Compared to Window Size shrinking, this method does not require waiting for ACK, which saves two RTTs. This is preferrable method of operation since it has no cons. It's faster and easier to handle in the software.	4 years ago
ValdikSS	ad60d30caa	Fix fake packet handling without other modifying parameters Fixes #150	4 years ago
ValdikSS	b5d75a6c8e	Version v0.1.6	6 years ago
ValdikSS	f2de8fce8d	Fake Request Mode	6 years ago