Full tunnel mode

[Plangto]

How use full tunnel mode and is it possible use it which orcale vps? Also if use full tunnel mode can it do like cloudflare anti bot or open apps like YouTube or telegram whitout it's website?

[therealaleph]

@Plangto — answered each piece, with pointers to existing detailed threads to avoid retyping:

How to use Full tunnel mode

Step-by-step Persian guide already in #310 reply + the tunnel-node README in Persian: https://github.com/therealaleph/MasterHttpRelayVPN-RUST/blob/main/tunnel-node/README.fa.md

Five-step shortlist:

1. Get a VPS (Hetzner CX11 €4/mo recommended)
2. Install Docker, run mhrv-tunnel-node container with TUNNEL_AUTH_KEY env var
3. Apps Script: deploy CodeFull.gs (not Code.gs) with TUNNEL_SERVER_URL and TUNNEL_AUTH_KEY set to your VPS
4. mhrv-rs config.json: "mode": "full", tunnel_node_url, auth_key, deployment_ids
5. Connect

Oracle Cloud VPS — yes, with caveats

Yes, Oracle Cloud free tier works — it's a real Linux VM with public IP, Docker installs fine, tunnel-node runs.

Caveats:

• Free tier is 4 ARM cores or 2 AMD cores total across your account, plenty for tunnel-node
• Oracle has been reclaiming inactive free-tier instances — if you don't use the box for 7+ days, they may delete it. tunnel-node running 24/7 keeps it active so this is rare
• Network reputation: Oracle Cloud's IP space has the same datacenter-IP issue as Hetzner/DO/etc. — Cloudflare-protected sites may challenge requests from Oracle IPs same as anywhere else
• Signup needs a credit card for verification (no charge, but card required)

If you can sign up for Oracle, free is hard to beat. If signup is hard from Iran, Hetzner CX11 €4/mo is the fallback.

Cloudflare anti-bot — Full mode helps but doesn't fully fix

Already covered in #380.

Quick answer: Full mode + VPS makes the request come from your VPS IP (not Apps Script's Google datacenter IP). Cloudflare's heuristics treat any datacenter IP with extra suspicion — so you trade "Google datacenter" for "Hetzner/Oracle datacenter." Sometimes the second one is treated less suspiciously, sometimes the same. Net: ~30% improvement on Cloudflare-protected sites, not a full fix.

Real fix for Cloudflare: residential IP outbound. Coming via WARP integration in v1.8.x (#309). Until then: passthrough_hosts for the specific Cloudflare-protected sites you care about (uses your home ISP's IP for those — bypasses bot heuristic since you're a real human).

YouTube + Telegram apps without website — Full mode handles both

YouTube app on Android:

• Full mode + Tunnel mode (VpnService) on Android = all YouTube traffic captured + tunneled through tunnel-node
• 60-second SABR cliff doesn't apply (tunnel-node forwards raw TCP, not Apps Script's half-duplex UrlFetchApp)
• Works the same as YouTube on a regular VPN

Telegram app:

• Full mode + Tunnel mode = MTProto + WebSocket carry through tunnel-node
• Telegram works fully (chat + voice/video calls + media)
• The "udpgw" feature in tunnel-node (since v1.7.0) is what makes Telegram voice calls possible — UDP forwarding via the tunnel

Both without needing to navigate to a website — tunnel mode captures all traffic at the OS level, so apps that don't expose proxy settings (which is most mobile apps) get tunneled invisibly.

Caveat: Tunnel mode (VpnService) needs explicit user permission once at first connect. After that it persists.

Summary of what to set up

If you want all of "Full tunnel + Oracle VPS + YouTube/Telegram apps + best Cloudflare experience available":

1. Sign up for Oracle Cloud free tier (or pay €4/mo for Hetzner CX11)
2. Follow tunnel-node setup from tunnel-node README فارسی
3. Deploy CodeFull.gs (not Code.gs) — uses tunnel-node, not direct Apps Script
4. mhrv-rs Android: Settings → Connection mode = full, Operating mode = Tunnel (VpnService)
5. For Cloudflare-protected sites that still get blocked: add passthrough_hosts: [...] in config

This is the maximum-functionality config currently shipping. v1.8.x's WARP outbound + the v1.9.x xmux work will tighten the Cloudflare gap and improve resilience to ISP filters further.

---

_{[reply via Anthropic Claude | reviewed by @therealaleph]}

[therealaleph]

فعلاً این issue را می‌بندم چون بیش از ۷ روز از پاسخ/درخواست اطلاعات گذشته و از طرف گزارش‌دهنده اصلی پیگیری جدیدی نیامده.

اگر مشکل هنوز روی آخرین نسخه وجود دارد، لطفاً همین‌جا دوباره کامنت بگذارید یا issue را reopen کنید و نسخه، mode، شکل config مرتبط و log جدید را بفرستید.

---

Answered via LLM, Supervised @therealaleph