cyfdecyf/cow
Cow
This project is a Go-based HTTP proxy server designed as a censorship circumvention tool. It functions as an upstream proxy manager and SOCKS5 tunneling gateway that routes network traffic between clients and destination servers to bypass network restrictions.
The system differentiates itself through automated proxy routing, which detects unreachable websites and automatically switches traffic between direct access and a pool of parent proxies. It includes a PAC file generator to produce proxy auto-config files for browsers and integrates SSH tunneling to establish secure remote sockets.
Broader capabilities include upstream proxy load balancing, connection pooling to reduce handshake latency, and IP-based access control for restricting proxy usage. The project also monitors site connectivity and tracks visit statistics to optimize routing decisions and estimate connection timeouts.
Settings are managed through configuration files located in the executable directory.
Features
- HTTP Proxies - Provides a Go-based HTTP proxy server that routes network traffic between clients and destination servers.
- Censorship Bypass Routing - Routes network traffic through parent proxies to circumvent regional or national internet censorship.
- Proxy Routing - Routes network traffic through a managed pool of HTTP and SOCKS5 parent proxies to access restricted content.
- Automated Block Detection - Automatically detects unreachable websites and reroutes traffic through parent proxies when direct connections fail.
- Access Control Lists - Uses configuration files to define domains that are permanently blocked or accessed directly.
- Censorship Circumvention Tools - Functions as a tool to bypass regional network restrictions by routing blocked sites through parent proxies.
- Direct Connection Routing - Allows specified domains to be accessed directly, bypassing the proxy to ensure connectivity to unrestricted sites.
- Domain Traffic Filters - Matches network requests against domain lists to determine if traffic must be routed through a parent proxy.
- Proxy Load Balancers - Distributes outgoing traffic across a pool of parent proxies using hashing, latency, or backup strategies.
- Connectivity-Based Auto-Routing - Automatically detects unreachable websites and switches traffic between direct access and parent proxies to bypass blocks.
- Proxy Management Systems - Manages pools of parent proxies with integrated load balancing and failure detection mechanisms.
- Upstream Proxy Pools - Maintains and rotates a pool of upstream proxies to ensure reliable connectivity and bypass network censorship.
- Dynamic Proxy Selection - Dynamically selects the optimal proxy node based on success-rate maps and configuration lists.
- SOCKS5 Gateway Tunnels - Implements a SOCKS5 tunneling gateway that manages SSH tunnels for secure remote traffic forwarding.
- Blocked Connection Monitoring - Monitors successful and failed connection attempts per domain to identify blocked websites.
- Host Routing Statistics - Records successful visits and blocked attempts per host to determine the most effective routing method.
- Network Visit Histories - Maintains a timestamped history of visited hosts and success rates to optimize proxy routing.
- Connection Pooling - Reuses active network connections based on host and port to reduce handshake latency.
- Connection Pooling Mechanisms - Shares established network connections between clients to minimize handshake overhead and reduce latency.
- SSH Tunneling Forwarders - Integrates SSH tunneling to establish secure remote sockets and local SOCKS5 proxies.
- Access Control Lists - Implements access control lists to restrict proxy usage based on client IP addresses and password files.
- Client Usage Restrictions - Restricts proxy usage by authenticating users through password files or specific client identifiers.
- SSH Tunneling - Establishes secure tunnels using system commands and public key authentication to create local SOCKS5 proxies.
- Proxy Authentication - Enforces access control on network proxy connections through credential-based validation.
- Host Connectivity Statistics - Tracks connection success rates for hosts to optimize routing decisions and update access lists.
- IP Access Restrictions - Validates client IP addresses and requires credentials to restrict access to the proxy server.
- PAC Script Generators - Generates Proxy Auto-Configuration (PAC) files to automate routing decisions in web browsers.
