v150.0.7871.63-1

Rebased to 150.0.7871.63.

v149.0.7827.114-1

Rebased to 149.0.7827.114.

v148.0.7778.96-6

Disable DCHECK which causes crashes on mipsel.

v148.0.7778.96-5

Fix various crashes since introducing preambles.

v148.0.7778.96-2

Limit tunnel lifetime (configurable with --tunnel-timeout and --idle-timeout). This helps with network stall and slowness after long-lived connections, possibly caused by CGNAT.

v147.0.7727.49-3

Now NaiveProxy will send realistic Chrome requests as preambles before and during tunneled TLS handshakes, making traffic analysis based on the initial period of TLS connections much harder.

The preamble URLs are extracted from the root page source of the fronting web server, and can be configured by editing the root page.

Other notes about Caddyfile:

Prevent Caddy from logging http.log.error http2: stream closed which contains user activity information:

{
  log {
    exclude http.log.error # Avoid logging user activity
  }
}

A realistic fronting website should enable content compression:

:443, example.com {
  encode
}

v147.0.7727.49-2

#779
#769

v147.0.7727.49-1

Rebased to 147.0.7727.49.

v143.0.7499.109-2

Rebased to 143.0.7499.109.

Fixed fastopen transition logic that is broken after rebase.

v140.0.7339.123-2

Support multiple proxies in one NaiveProxy process to save memory usage.

Examples:

• "listen": ["http://:8080", "http://:8081"]: Listens on port 8080 and 8081; both route to origin directly.
• "listen": ["http://:8080", "http://:8081"], "proxy": "https://a.com": Listens on port 8080 and 8081; both route to the proxy server a.com.
• "listen": ["http://:8080", "http://:8081"], "proxy": ["https://a.com", "https://b.com"]: Listens on port 8080 and 8081. Port 8080 routes to a.com. Port 8081 routes to b.com.

Note that --proxy=https://a.com,https://b.com is a proxy chain, not two proxies.