shadowsocks/shadowsocks-rust

Features

• SOCKS5 Servers - Presents a standard SOCKS5 interface on the local machine for any SOCKS5-aware application to route traffic through the encrypted tunnel.
• Tunneling Server Deployments - Sets up a Shadowsocks server on a cloud-hosted Linux machine to route traffic through an encrypted tunnel.
• Shadowsocks Server Managers - A lightweight encrypted proxy server written in Rust for bypassing network restrictions.
• Proxy Connection Configurations - Configures tunnel proxy with server address, port, password, and encryption method in a JSON file.
• UDP Tunneling - Encrypts outbound UDP datagrams at the local proxy and decrypts them at the remote proxy for forwarding to the destination.
• Encrypted Datagram Transmitters - Encrypts each UDP packet independently with a random salt and fixed nonce for out-of-order processing.
• SOCKS5 Proxies - Accepts connections on a local SOCKS5 port and relays them through the encrypted tunnel to the destination.
• SOCKS5 Proxy Tunneling Clients - Accepts local SOCKS5 connections and routes traffic through an encrypted tunnel to a remote server.
• TCP Tunneling - Encrypts outbound TCP streams at the local proxy and decrypts them at the remote proxy for forwarding to the destination.
• AEAD Encrypted Proxies - Encrypts TCP proxy streams using AEAD ciphers with per-session subkeys derived from a pre-shared key and random salt.
• Encrypted Stream Handlers - Splits TCP connections into encrypted chunks with length, authentication tags, and a counting nonce.
• Traffic Tunneling - Encrypts and forwards network traffic through a remote server to bypass firewalls and hide the client's IP address.
• Session ID-Based UDP Routers - Routes incoming UDP packets based on the client session ID rather than source address for network change resilience.
• Authenticated Encryption - Encrypts tunnel data using authenticated encryption that provides confidentiality, integrity, and authenticity in one operation.
• Encrypted Tunneling - Provides encrypted tunneling to bypass network restrictions and hide the client's IP address.
• AEAD-2022 Cipher Suites - Encrypts proxy traffic using modern authenticated encryption with per-session subkeys and replay protection for TCP and UDP.
• AEAD Cipher Implementations - Encrypts TCP and UDP traffic using AEAD ciphers like chacha20-poly1305 and aes-256-gcm.
• AEAD-2022 Cipher Suites - Implements the AEAD-2022 cipher suite for encrypting proxy traffic with per-session subkeys.
• Session Key Derivation - Generates a unique per-session subkey from a shared master key using HKDF-SHA1 with a random salt.
• Configurable Cipher Encryptors - Encrypts tunnel traffic using AEAD ciphers like chacha20-ietf-poly1305 or aes-256-gcm for integrity and authenticity.
• Traffic Obfuscation - Implements traffic obfuscation by making proxy traffic indistinguishable from random bytes to evade deep packet inspection.
• TCP Stream Replay Protections - Implements TCP replay attack prevention by storing incoming salts and rejecting duplicates with out-of-range timestamps.
• UDP Session Replay Protections - Implements UDP replay attack prevention using a sliding window filter per relay session to reject duplicate packet IDs.
• Proxy DNS Routers - Intercepts DNS queries and forwards them through the encrypted tunnel to a remote DNS server.
• HTTP Proxies - Runs an HTTP proxy using the CONNECT method to support standard HTTP clients.
• DNS Proxy Bridges - Intercepts plaintext DNS queries and forwards them over encrypted upstream connections.
• Live Config Managers - Supports multiple users on a single port with live configuration updates and per-user monitoring.
• RFC1929 Authentication - Implements RFC1929 username/password authentication for SOCKS5 connections.
• TUN Mode Integration - Creates a virtual network interface that routes all system traffic through the proxy for full-device coverage.
• Proxy Configuration Standards - Implements standard URL and JSON formats for sharing proxy server configurations.
• SOCKS5 User Authentication - Authenticates SOCKS5 users with username and password verification against a configuration file.
• Lightweight Proxies - Runs a minimal-footprint proxy server suitable for embedded devices and low-end hardware.
• Transparent Proxy Forwarders - Intercepts network traffic at the system level using firewall rules and redirects it through the encrypted tunnel without client configuration.
• HTTP Proxy Forwarders - Accepts HTTP and HTTPS connections on a local port and forwards them through the encrypted tunnel.
• Transparent Network Proxies - Intercepts and redirects network traffic at the system level using firewall rules, requiring no client configuration.
• Transparent Proxying - Intercepts system-level traffic via firewall rules or TUN interface for transparent proxy redirection.
• Firewall Redirection - Intercepts system-level traffic via firewall rules and redirects it through the encrypted tunnel.
• TUN Interface Proxies - Creates a virtual network interface that routes all system traffic through the encrypted tunnel for full-device coverage.
• Encrypted Session Relays - Relays UDP packets over sessions identified by a unique session ID, encrypting each with a session-specific subkey.
• Session-Based Relays - Relays UDP packets over session-based tunnels with per-session encryption and replay protection.
• Session-Based UDP Relays - Relays UDP packets over session-based tunnels with per-session encryption and replay protection.
• TUN Interface Routing - Creates a virtual TUN interface that routes all system traffic through the encrypted tunnel.
• Proxy Configuration Encoders - Encodes proxy server details into a BASE64 URI for quick mobile client setup via scanning.
• Access Control Lists - Provides access control lists to block or allow traffic to specific destinations based on rules defined in an ACL file.
• Replay Prevention Salts - Prevents replay attacks on TCP streams by storing incoming salts and checking timestamps.
• Base64 Key Generators - Creates secure, Base64-encoded keys of the correct length for a specified encryption method.
• Proxy Management - Manages multiple proxy users by starting, stopping, listing, and monitoring individual proxy server instances.
• SOCKS5 Authenticators - Requires username and password authentication for SOCKS5 connections using the standard RFC1929 protocol.
• AEAD-2022 Cipher Encryptors - Encrypts tunnel traffic using AEAD-2022 ciphers with keys generated from a secure command-line tool.
• Proxy User Managers - Supports multiple proxy users on a single port with live configuration updates and monitoring.
• Server Instance Managers - Manages multiple proxy server instances in a single process via a management API for live config updates and monitoring.
• Proxy Instance Managers - Provides a management API to start, stop, list, and monitor multiple proxy server instances.

سجل النجوم