voronind/nix
0
0
Fork 0
Code Issues 41 Pull requests Packages Projects Releases Wiki Activity

Upstream zapret improvements. #228

New issue
Closed
opened 2024-10-31 20:48:02 +03:00 by voronind · 3 comments
voronind commented 2024-10-31 20:48:02 +03:00
Owner
Copy link
  1. Use nftables.
  2. ipv6 support.
  3. Full http mode.
  4. Udp support?
  5. New profiles?
  6. ipsets.
1. Use nftables. 2. ~~ipv6 support~~. 3. ~~Full http mode~~. 4. ~~Udp support?~~ 5. New profiles? 6. ipsets.
voronind added the
Roadmap
 label 2024-10-31 20:48:02 +03:00
voronind pinned this 2024-10-31 20:48:07 +03:00
voronind commented 2024-10-31 20:49:16 +03:00
Author
Owner
Copy link

Ping @roman3pm when draft pr ready.

Ping @roman3pm when draft pr ready.
voronind commented 2024-11-06 00:57:41 +03:00
Author
Owner
Copy link
iptables -t mangle -A POSTROUTING -p udp -m multiport --dports 50000:50099 -m mark ! --mark 0x40000000/0x40000000 -m connbytes --connbytes 1:1 --connbytes-mode packets --connbytes-dir original -j NFQUEUE --queue-num 65400 --queue-bypass

nfqws --dpi-desync=disorder --dpi-desync-ttl=1 --dpi-desync-split-pos=3 --dpi-desync=split2 --dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-any-protocol --dpi-desync=fake --qnum=65400 --dpi-desync-fwmark=0x40000000

shell

iptables -t mangle -A POSTROUTING -p udp -m multiport --dports 50000:50099 -m mark ! --mark 0x40000000/0x40000000 -m connbytes --connbytes 1:1 --connbytes-mode packets --connbytes-dir original -j NFQUEUE --queue-num 200 --queue-bypass
``` iptables -t mangle -A POSTROUTING -p udp -m multiport --dports 50000:50099 -m mark ! --mark 0x40000000/0x40000000 -m connbytes --connbytes 1:1 --connbytes-mode packets --connbytes-dir original -j NFQUEUE --queue-num 65400 --queue-bypass nfqws --dpi-desync=disorder --dpi-desync-ttl=1 --dpi-desync-split-pos=3 --dpi-desync=split2 --dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-any-protocol --dpi-desync=fake --qnum=65400 --dpi-desync-fwmark=0x40000000 shell iptables -t mangle -A POSTROUTING -p udp -m multiport --dports 50000:50099 -m mark ! --mark 0x40000000/0x40000000 -m connbytes --connbytes 1:1 --connbytes-mode packets --connbytes-dir original -j NFQUEUE --queue-num 200 --queue-bypass ```
voronind unpinned this 2024-11-14 17:11:47 +03:00
voronind pinned this 2024-11-15 23:49:13 +03:00
voronind commented 2024-11-30 23:08:28 +03:00
Author
Owner
Copy link

https://github.com/NixOS/nixpkgs/pull/356339

https://github.com/NixOS/nixpkgs/pull/356339
voronind unpinned this 2024-12-10 01:35:12 +03:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
Backlog

Something that should have been done in the past.

  
Bug

Something unintended.

  
Discussion

Something to talk about.

  
Doc

Documentation-related.

  
Future

Something planned for the future.

  
Roadmap

Something upcoming.

  
Test

Testing-related.

No labels
Backlog
Bug
Discussion
Doc
Future
Roadmap
Test
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: voronind/nix#228
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?