ospab
a9e4511190
Fix CLI setup permissions, enforce global debug tracing, and fix GUI silent startup crash
2026-06-13 01:25:54 +03:00
ospab
7bb7d211fa
Remove stealth_port entirely and integrate fallback into UoT HTTP handler
2026-06-10 02:26:13 +03:00
ospab
902e762c91
fix(xhttp): rewrite RealityStream buffering to prevent packet drops and data loss
2026-05-30 01:10:29 +03:00
ospab
7257da174a
fix(client/mobile): resolve fdsan crash and mobile network proxy issues, add auto config UI
2026-05-30 00:54:46 +03:00
ospab
7986b1ca5b
fix(reality): fix TLS 1.3 handshake causing 1KB DPI cutoff on mobile
...
The core bug: server sent 5 TLS records in server_hello but client only
read the first one (ServerHello), then passed remaining bytes (CCS + fake
records) into RealityStream. RealityStream saw 0x14 (CCS) != 0x17 and
immediately returned an error, killing the connection.
Changes:
- reality.rs: append ChangeCipherSpec after ClientHello (RFC 8446 D.4)
export REALITY_SERVER_HANDSHAKE_RECORDS=5 constant
- xhttp.rs: drain all 5 server handshake records before creating RealityStream
- uot.rs: rebuild server_hello as proper 5-record TLS 1.3 flight:
ServerHello + CCS + fake EE (108B) + fake Cert (812B) + fake Fin (52B)
drain client CCS from raw stream before wrapping in RealityStream
2026-05-29 16:21:59 +03:00
ospab
7656f3a3ce
feat: implement custom Reality protocol with ChaCha20Poly1305 and X25519
2026-05-29 15:00:17 +03:00
ospab
f4830f043f
feat: implement optional WSS framing for DPI bypass & extract framing logic
2026-05-29 13:59:59 +03:00
ospab
0334322aae
Fix Speedtest disconnects and Discord WebRTC
2026-05-28 19:25:06 +03:00
ospab
cba7be4b75
Implement config management API, token generation, and update wiki
2026-05-26 19:33:45 +03:00
ospab
9e50984549
Fix linux format args, proxy config fields, and unused warnings
2026-05-24 23:03:50 +03:00
ospab
3e511f1fc5
Implement XTLS-Reality masquerade for UoT/TCP and fix MTU/config settings
2026-05-24 22:49:51 +03:00
ospab
09b6f202d0
fix: UoT always uses plain TCP (remove broken TLS branch for port 443)
2026-05-21 14:59:48 +03:00
ospab
834c244f94
feat: disguise UoT handshake as WebSocket to bypass DPI and proxies
2026-05-21 14:11:50 +03:00
ospab
960382e93b
fix: revert UoT POST back to GET for direct DPI bypass without proxy
2026-05-21 14:05:43 +03:00
ospab
1bc63c4094
feat: add X-Ostp-Server validation to UoT handshake
2026-05-21 13:15:49 +03:00
ospab
92fc73756f
fix: use POST and Content-Length in UoT to prevent nginx chunked encoding
2026-05-21 13:06:06 +03:00
ospab
a81625d721
fix: correctly handle payload buffering during http handshake in uot
2026-05-21 12:43:47 +03:00
ospab
ceb760e4ce
feat: implement server-side UoT and MTU tuning
2026-05-21 02:23:49 +03:00