OutlineFoundation/outline-server
Outline Server
Outline is a server that manages and runs Shadowsocks proxy instances, each isolated inside its own Docker container, to provide encrypted internet access. It is designed to bypass censorship by routing traffic through secure tunnels that use AEAD cipher encryption and traffic obfuscation to resist detection. Access to the proxy servers is controlled through a REST API that allows administrators to create, list, and revoke cryptographic access keys.
The server automates the provisioning and configuration of proxy servers on cloud platforms like DigitalOcean, simplifying deployment through a manager application. It includes active probing resistance to handle invalid bytes and replayed data, preventing censors from identifying the proxy. Optional anonymous metrics reporting sends anonymized server statistics to a separate REST service for operational monitoring without identifying users.
The system enforces authenticated encryption with associated data ciphers and generates long random secrets to prevent traffic decryption. It also merges SOCKS addresses with initial encrypted data and randomizes packet sizes to evade packet-level detection. Each Shadowsocks instance runs in its own Docker container for process isolation and simplified lifecycle management.
