wangyu-/udp2raw
Udp2raw
udp2raw is a network tunneling tool designed to bypass firewalls and obfuscate UDP traffic. It wraps UDP packets in alternative headers and utilizes raw socket networking to move data through networks that otherwise block or throttle UDP traffic.
The project distinguishes itself by simulating TCP connections, mimicking the three-way handshake and sequence numbering to trick firewalls into treating UDP streams as TCP traffic. It further stabilizes these connections through heartbeat-driven port rotation, which automatically switches ports to recover sessions after detected failures.
The tool provides a comprehensive security suite including symmetric-key encryption, HMAC-based traffic authentication, and sliding-window replay protection. It also supports UDP connection multiplexing to route multiple independent conversations through a single shared raw tunnel.
Operational control is managed via a command-line interface and a FIFO-pipe for asynchronous process management, supported by a configurable system logging utility.
Features
- UDP Tunneling - Wraps UDP packets in alternative headers to tunnel traffic through firewalls and restrictive NAT environments.
- Network Traffic Obfuscators - Encrypts and masks UDP streams to hide communication patterns and evade deep packet inspection.
- Firewall Bypass Utilities - Circumvents local packet filters and firewall rules by sending packets at the OSI link level.
- Raw Socket Injection - Utilizes raw socket networking to bypass system firewalls and standard transport socket limitations.
- Packet Authentication - Ensures data integrity and authenticity by appending HMAC cryptographic hashes to every tunneled packet.
- Packet Injection Engines - Utilizes raw sockets to construct and inject network packets at the link layer, bypassing system firewalls.
- Restrictive Network Connectivity - Ensures communication stability in restrictive environments via heartbeats and automatic port rotation.
- Raw - Sends network packets at the link layer to circumvent local system firewalls and standard socket limitations.
- Encrypted Raw Sockets - Sends encrypted data packets at the link level to bypass system firewalls and socket limitations.
- Fake-TCP Tunneling - Mimics the TCP three-way handshake and sequence numbering to bypass firewalls while delivering real-time UDP traffic.
- Protocol Simulation - Wraps UDP traffic in fake TCP headers and mimics handshakes to bypass firewalls that block UDP.
- TCP Handshake Simulation - Implements a fake TCP three-way handshake and sequence numbering to bypass firewalls by mimicking TCP traffic.
- TCP State Simulation - Mimics TCP connection states and sequence numbers to trick firewalls into treating UDP streams as TCP connections.
- Encrypted Tunneling - Establishes secure, encrypted connections designed specifically to bypass network restrictions.
- Secure Tunneling - Encrypts tunneled data using a shared password to protect privacy and bypass restrictions.
- Symmetric Encryption - Obfuscates tunneled data using symmetric-key block ciphers to prevent inspection by intermediaries.
- Traffic Encryption - Provides encryption for data in transit to prevent detection and ensure communication privacy.
- Connection Keepalives - Maintains active network connections through periodic heartbeats and timeout monitoring.
- Connection Multiplexing - Bundles multiple logical UDP data streams into a single physical raw connection.
- Connection Multiplexing - Routes multiple independent UDP conversations through a single shared raw tunnel using unique identifiers.
- Automatic Port Rotation - Automatically rotates ports to recover sessions after heartbeats detect a connection failure.
- UDP Protocol Multiplexing - Multiplexes several UDP conversations into a single raw tunnel for efficient endpoint routing.
- UDP Session Multiplexing - Maps multiple independent UDP conversations into a single raw tunnel using unique identifiers for routing.
- Packet Replay Protections - Uses a sliding window of sequence numbers to detect and reject duplicate packets.
- UDP Session Replay Protections - Implements sliding-window replay protection to detect and reject duplicate packets in UDP sessions.
- Automatic Connection Restoration - Detects link failures via heartbeats and automatically establishes new links by switching ports.
- Connection Heartbeats - Uses periodic heartbeat signals to monitor connection health and detect link failures.
- Media & Communication - Tunnel for bypassing UDP firewalls.
