# dpi-frag

> Local SOCKS5 proxy in C++ that splits the TLS ClientHello across multiple TCP segments so SNI-based DPI can't pattern-match the domain in one packet.

Written for Windows, built with CMake and MSVC. No raw sockets, no drivers, works at the application/socket layer only.

## Docs

- [README](https://github.com/ImSavsis/dpi-frag/blob/master/README.md): build and usage instructions, architecture diagram
- [src/main.cpp](https://github.com/ImSavsis/dpi-frag/blob/master/src/main.cpp): SOCKS5 handshake and relay logic
- [src/sni_split.cpp](https://github.com/ImSavsis/dpi-frag/blob/master/src/sni_split.cpp): TLS ClientHello parser that finds the SNI split point

## Notes

- Not a VPN, does not encrypt traffic
- Does not help against IP-based blocking, only SNI-based