klzgrad/naiveproxy
Naiveproxy
naiveproxy is a censorship circumvention tool and traffic obfuscation proxy. It functions as an HTTP/2 transport proxy that tunnels SOCKS5 traffic over HTTP/2 to hide network activity and bypass network blocks.
The project distinguishes itself by mimicking standard web browser requests to evade deep packet inspection. It employs traffic camouflage techniques such as redirecting unauthorized probing requests to decoy web servers and using randomized packet padding to defeat length-based traffic analysis.
The software provides a local SOCKS5 proxy endpoint, credential-based request authentication, and a proxy auto-configuration server for mobile devices. It includes optimizations for connection latency and network throughput.
The project supports static binary compilation for multiple CPU architectures to facilitate deployment on embedded router hardware and integrates as a background system service on Linux.
Features
- Browser Traffic Mimicry - Mimics standard web browser requests using a standard network stack to evade deep packet inspection and censorship.
- HTTP Traffic Camouflaging - Mimics standard web browser requests to bypass deep packet inspection and network filters.
- SOCKS5 Translation - Converts local SOCKS5 proxy requests into an obfuscated HTTP stream for transmission to a remote server.
- HTTP/2 Tunnels - Utilizes the HTTP/2 protocol for secure, multiplexed, and obfuscated data transmission tunneling.
- Traffic Pattern Obfuscation - Employs randomized packet padding to disguise communication patterns and defeat length-based traffic analysis.
- Packet Length Obfuscation - Adds randomized padding to packets to prevent traffic analysis based on packet size.
- Traffic Masking Proxies - Camouflages proxy traffic as regular web browser requests to evade deep packet inspection.
- SOCKS5 Proxies - Creates a local SOCKS5 proxy endpoint that forwards traffic to a remote server via secure tunnels.
- HTTP/2 Transport Tunnels - Tunnels SOCKS5 traffic over HTTP/2 to bypass censorship and evade traffic analysis.
- SOCKS5 Proxy Tunneling Clients - Implements a local SOCKS5 proxy client that tunnels application traffic over an obfuscated HTTP/2 stream for DPI evasion.
- Censorship-Resistant Redirections - Masks the proxy server's presence by redirecting unauthorized probing requests to legitimate external websites.
- Unauthorized Traffic Redirection - Redirects unauthorized probing requests to decoy web servers to hide the presence of the proxy service.
- Censorship Circumvention Tools - Enables access to blocked content by routing traffic through decoy servers and obfuscated tunnels.
- Traffic Obfuscators - Hides proxy connections by mimicking standard web browser activity to bypass deep packet inspection.
- Data Throughput Optimizers - Maximizes data transfer speeds over high-latency links by adjusting window sizes and congestion control.
- Embedded Hardware Deployment - Provides support for deploying the proxy service on various embedded router architectures.
- Embedded Router Networking - Allows for the installation and operation of proxy services on embedded hardware to secure entire networks.
- Connection and Latency Optimizers - Improves responsiveness for persistent connections by tuning kernel buffer handling and disabling slow-start.
- Cloaking Proxies - Protects the backend proxy from discovery by routing probing requests through a frontend server.
- Proxy Authentication - Provides credential-based authentication to verify users before granting access to the backend proxy service.
- Header-Based Routing - Implements routing logic that forwards requests to a backend or decoy site based on specific HTTP request headers.
