Skip to content

Update config.fronting-groups.example.json#696

Merged
therealaleph merged 1 commit intotherealaleph:mainfrom
Shjpr9:main
May 4, 2026
Merged

Update config.fronting-groups.example.json#696
therealaleph merged 1 commit intotherealaleph:mainfrom
Shjpr9:main

Conversation

@Shjpr9
Copy link
Copy Markdown
Contributor

@Shjpr9 Shjpr9 commented May 3, 2026

Added more Fastly fronting groups

I've added more Fastly domains that can be used in domain-fronting including Pinterset, CNN, Reddit, etc.
Most of them where introduced in this commit and in the original file

All the credits goes to @patterniha

Added more Fastly fronting groups
@therealaleph
Copy link
Copy Markdown
Owner

@Shjpr9 — JSON parses, additions are all on the Fastly Anycast (151.101.x.x) edge, no functional risk. Some of the more obscure entries (e.g. cnnmoney.ch, redditspace.com, the multi-CDN cnnmoneystream.com) may not actually resolve through that specific Fastly POP — but the example file is exactly the place to surface "here are domains worth trying"; users will discover what works in their network and trim. Merging.


[reply via Anthropic Claude | reviewed by @therealaleph]

@therealaleph therealaleph merged commit d8d03be into therealaleph:main May 4, 2026
1 check passed
therealaleph added a commit that referenced this pull request May 4, 2026
…rectness

Android (#700 from @ilok67):
- Reordered MhrvVpnService.teardown() to call Native.stopProxy() FIRST. The previous order (tun2proxy.stop → tun.close → join → stopProxy) crashed SIGSEGV ~2s after Disconnect: tun2proxy's worker thread was blocked in native code on a SOCKS5 socket read; after the 2s+4s timeouts expired with the worker still alive, Native.stopProxy freed the runtime including that socket, and the worker hit use-after-free in the next read. The old comment claimed "runtime shutdown will knock the rest of the world over" — wrong, Native.stopProxy can't forcibly terminate a separate native thread, it just frees memory the other thread is still using. New order closes the socket first, the worker's blocking read returns with EOF, the worker exits cleanly through its error path, and the join is then near-instant.

tunnel-node (PR #695 from @dazzling-no-more, merged):
- Cleanup now tracks eof'd sids from drain_now's return value, not the raw atomic — was silently dropping the tail on >16 MiB buffers when EOF arrived between polls.
- Phase-1 `data` op no longer holds the sessions map across upstream write/flush — was head-of-line-blocking every other batch op.
- Mixed TCP+UDP batch wait switched from tokio::join! to tokio::select! — was paying the UDP LONGPOLL_DEADLINE (15 s) on TCP-ready bursts.
- Watcher tasks now wrapped in AbortOnDrop newtype — was leaking Arc<Inner> permits when select!'s loser arm dropped its future.
- 2 new regression tests, 35/35 pass.

Example configs:
- config.exit-node.example.json: added aistudio.google.com + ai.google.dev to default hosts (#701 — AI Studio sanctions Iran IPs).
- config.fronting-groups.example.json: PR #696 from @Shjpr9 added Reddit/Fastly/Pinterest/CNN/BuzzFeed family domains on the Fastly 151.101.x.x edge.

Tests: 179 lib + 35 tunnel-node green.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants