-
Notifications
You must be signed in to change notification settings - Fork 0
Internet access
DPI bypass for PC, can bypass proto blocks, can't bypass per ip blocks
Updated Zapret version
Public configuration of Zapret
No root DPI bypassing for Android, works in a way similar to a Zapret
Panel for Xray protocols(VLess, Hysteria2, Wireguard and other Xray-Core protocols)
for using webRTC services for videocalls as proxy, if service in whitelist you can bypass whitelist, work now, but webRTC services may trying to ban this abuses, theoretically DPI can't detect this now because voice traffic doesn't have any patterns. In addition, this service ensures high traffic speeds for high-quality video and audio. This method is possibly one of the fastest when whitelists are enabled.
panel for sing-box protocols(NaiveProxy, ShadowTLS and other sing-box protocols)
do not use this for bypasses OpenVPN, Wireguard, ShadowSocks, IKEv2
A small, time-independent Xray-Core protocol that can be assembled and configured like a Lego set from transport and security protocols. Reality security good for active probing protection, XHTTP transport good for making fake http traffic, you also can use gRPC because this method is less popular among VPNs, whereas more and more businesses are switching to gRPC. TCP(Raw) is bad but this is just TCP traffic and can be detected by DPI.
Xray-Core UDP-based protocol, faster than vless, especially in noisy networks, also has active probing protection, but UDP traffic is suspect for DPI
that proto using Chromium transport as proxy, You don't disguise yourself, you become Chromium traffic.
A new proxy protocol that does not make TLS-handshakes. Simply sending encrypted traffic without TLS can allow DPI to detect the protocol, as happened with ShadowSocks. Now undetected
Using DNS requests as VPN, slow, but work on very strict whitelists, it can be DPIed by spam of BASE64 subdomains requests, work now
Using ICMP requests as VPN, slow, but work if standart internet protos are shutdowned, slow and can be DPIed by anomaly count of large pings, work now
Multiplatform client for olcRTC
- NekoBox - Very customizable (config and rules) android client for XRay-Core protos and more.
- NekoBox by Starifly - fork NekoBox + additional functions
- NekoBox+ - fork NekoBox by Starifly with more funcs and patches
- Throne - fork NekoRay for PC
It helps when there are strict restrictions on connecting to foreign servers—such as paid international traffic or speed throttling. Since such restrictions rarely apply to hosting providers, you can set up a cascaded server configuration: your traffic first goes to a server in your own country (ideally in the same city), then to the foreign server, and only then exits to the international network.
This allows you to hide your server's IP address from DPI, which offers significant advantages: on paper, the connection to your server appears to originate from a major, popular CDN network, providing an extra layer of masking. Essentially, it functions as a cascaded proxy where the first link in the chain is the entire CDN network rather than your server. If the CDN service is whitelisted, your server is effectively whitelisted too; while this method may incur additional costs, it is extremely fast.