16 lines
787 B
Text
16 lines
787 B
Text
# dpi-frag
|
|
|
|
> Local SOCKS5 proxy in C++ that splits the TLS ClientHello across multiple TCP segments so SNI-based DPI can't pattern-match the domain in one packet.
|
|
|
|
Written for Windows, built with CMake and MSVC. No raw sockets, no drivers, works at the application/socket layer only.
|
|
|
|
## Docs
|
|
|
|
- [README](https://github.com/devsavsis/dpi-frag/blob/master/README.md): build and usage instructions, architecture diagram
|
|
- [src/main.cpp](https://github.com/devsavsis/dpi-frag/blob/master/src/main.cpp): SOCKS5 handshake and relay logic
|
|
- [src/sni_split.cpp](https://github.com/devsavsis/dpi-frag/blob/master/src/sni_split.cpp): TLS ClientHello parser that finds the SNI split point
|
|
|
|
## Notes
|
|
|
|
- Not a VPN, does not encrypt traffic
|
|
- Does not help against IP-based blocking, only SNI-based
|