Skip to content

v1.2.1

Choose a tag to compare

@DigitalCyberSoft DigitalCyberSoft released this 14 Mar 01:58
· 2 commits to main since this release

Fix SOCKS5 QUIC proxy

Fixed SOCKS5 UDP relay support for tunneling QUIC connections through SOCKS5 proxies.

What changed

  • Replaced non-functional BIO filter approach with a socketpair-based forwarder thread
  • OpenSSL QUIC internally bypasses BIO filter chains for sendmmsg/recvmmsg, so we now use a Unix SOCK_DGRAM socketpair where one end goes to OpenSSL's native dgram BIO and a pthread forwarder on the other end wraps/unwraps SOCKS5 UDP headers
  • Full RFC 1928 SOCKS5 auth + UDP ASSOCIATE handshake in C

Tested

  • HTTP/3 over SOCKS5 (3proxy) to Cloudflare, verified via /cdn-cgi/trace
  • Direct QUIC unaffected
  • Graceful fallback to H2 when proxy doesn't support UDP