pac file limitation

[itskeKs]

Hello @zhuhaow,

i am running into some issues when i am using a pac file within NEKit on iOS 10.2.1. I dont know if it is related to NEKit or an Apple limitation but maybe you can help.

proxySettings.autoProxyConfigurationEnabled = true
proxySettings.proxyAutoConfigurationJavaScript = local.pacJSCode()
//proxySettings.proxyAutoConfigurationJavaScript = nil
//proxySettings.proxyAutoConfigurationURL = URL(string: "https://some/address/to/pac.js")

The error appears on both versions of code (local or remote pac). If i send a lot of requests either from an App or from Safari i have some kind of loading hang. It starts to load then the loading freezes and it takes the system something like 10-20s to load further.

For clarification: the pac file forwards to the proxy running on port 9090 so thats nit the issue. Requests are also forwarded to remote server when i am sing one.

Thanks for any help you can provide.

Best,

keKs

[zhuhaow]

There's a bug when safari connects a https site through proxy, it will pretend it is reading from the remote even if the connection is broken.
I do not know if this is the case or what you settings are.
Hope that helps.

[itskeKs]

hmm i dont think thats the issue here. since when i do not use the pac file everything works just fine. it looks more like there is something wrong within requests handling when pac file is used. when i open something what makes a lot of requests the requests kind of stop for a couple of seconds (some apps throw connection error) but then it starts loading again. i dont understand why this happens :|

[zhuhaow]

Since the details are as vague as possible, I really can't tell what happens.
Do you enable TUN interface and route DNS request to NEKit?

[itskeKs]

tun interface is disabled. dns requests are routed to nekit. the pac file contains a blacklist of hosts which are blocked. they get redurected to nginx with a 502 error so the system knows what to do.

[zhuhaow]

Eh, you can't route dns requests to NEKit without enabling tun interface.

[itskeKs]

then i dont get it. so it is disabled then.

how can i check actually?

[zhuhaow]

You can paste your code here.

[itskeKs]

which part of code? :)

[zhuhaow]

`startTunnelWithOptions` if you are using Network Extension.

…

On 5 Mar 2017, at 22:28, itskeKs ***@***.***> wrote: which part of code? :) — You are receiving this because you modified the open/close state. Reply to this email directly, view it on GitHub, or mute the thread.

[itskeKs]

...

[itskeKs]

...

[zhuhaow]

Whatever is wrong with PAC has nothing to do with NEKit.

[itskeKs]

ok :(

[itskeKs]

@zhuhaow which remote SS version does NEKit support? i am using ss 2.9.1 i think the issue might be here.

[zhuhaow]

Don't know.
If you can successfully connect to one host through ss proxy I don't think a lot simultaneous connections would make any difference.