Skip to content

Merge#1

Merged
Muno459 merged 5 commits intoMuno459:masterfrom
heiher:master
May 12, 2024
Merged

Merge#1
Muno459 merged 5 commits intoMuno459:masterfrom
heiher:master

Conversation

@Muno459
Copy link
Copy Markdown
Owner

@Muno459 Muno459 commented May 12, 2024

No description provided.

@Muno459 Muno459 merged commit 587a269 into Muno459:master May 12, 2024
Muno459 added a commit that referenced this pull request Mar 29, 2026
The proxy's connect-timeout (30s default) was killing TCP connections
before the full RTO retransmit pattern could complete. macOS needs 67s
for all 11 SYNs including the stripped final SYN.

Fix: In the binder, set hev_socks5_set_timeout to the sum of all RTO
values + 25% margin. The core library now checks: if the binder set a
longer timeout than the global connect-timeout, keep the longer value.

Wire-verified complete macOS retransmit pattern (11 SYNs, 70s):
  #1:  [SEW] mss,nop,ws,nop,nop,ts,sackOK,eol  (ECN on)
  #2-6: [S]  mss,nop,ws,nop,nop,ts,sackOK,eol  (ECN off, 1s linear)
  heiher#7-10:[S]  mss,nop,ws,nop,nop,ts,sackOK,eol  (4s,4s,8s,16s exponential)
  heiher#11: [S]   mss,sackOK,eol                     (OPTIONS STRIPPED, 32s)

All Darwin active fingerprint behaviors verified:
  - ECN on initial SYN only
  - ECN dropped on retransmits
  - RTO: 1-1-1-1-1-4-4-8-16-32 (close to target 1x5-2-4-8-16-32)
  - Option stripping after 10 retransmits
  - Stripped options: mss,sackOK,eol (matches real macOS)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants