TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Doxx/Darkflare: DarkFlare TCPoCDN (TCP over CDN)

157 点作者 josephscott6 个月前

10 条评论

ignoramous6 个月前
You could straight up connect to the destination (over TCP) from Cloudflare without needing relays; a project I wrote demonstrates TCP over HTTP (for Deno Deploy) and TCP over WebSockets (for Workers): <a href="https:&#x2F;&#x2F;github.com&#x2F;serverless-proxy&#x2F;serverless-proxy">https:&#x2F;&#x2F;github.com&#x2F;serverless-proxy&#x2F;serverless-proxy</a><p>Proxying projects utilising HTTP&#x2F;TLS are popular in the anti-censorship community (discussion board: <a href="https:&#x2F;&#x2F;github.com&#x2F;net4people&#x2F;bbs">https:&#x2F;&#x2F;github.com&#x2F;net4people&#x2F;bbs</a>) and there are many variants of it; ex:<p>- KCP (over UDP): <a href="https:&#x2F;&#x2F;github.com&#x2F;xtaci&#x2F;kcp-go">https:&#x2F;&#x2F;github.com&#x2F;xtaci&#x2F;kcp-go</a><p>- Bepass: <a href="https:&#x2F;&#x2F;github.com&#x2F;bepass-org&#x2F;bepass-worker">https:&#x2F;&#x2F;github.com&#x2F;bepass-org&#x2F;bepass-worker</a>
评论 #42323231 未加载
est6 个月前
&gt; Services like Cloudflare, Akamai Technologies, Fastly, and Amazon CloudFront ... support millions of websites across critical sectors, including government and healthcare, making them indispensable<p>The author is pretty naive. There is a reason why Google was left out of the list, in the 2010s people argue &quot;Google is too important and China never dare to block it&quot; then google&#x27;s whole IP range is blocked.<p>Amazon Cloudfront, Akmai, Fastly are also (partially) blocked and barely working.<p>IMHO cleve tricks like &quot;domain fronting&quot; is just freebooting
评论 #42323244 未加载
评论 #42201606 未加载
novakwok6 个月前
There seems another way to achieve this, using Cloudflare&#x27;s own cloudflared tunnel.<p>Install a cloudflared tunnel on your remote server, configure it to forward traffic to that server&#x27;s hosts proxy server(maybe Shadowsocks) using Zero Trust dashboard, and run the following command on your local computer:<p>cloudflared access tcp --hostname some.your-domain.tld --url localhost:8080<p>Then localhost:8080&#x27;s traffic will be forwarded to cloudflareds&#x27; host, the whole traffic is using HTTP2 so might look legitimate to Firewall.<p>For example if using Shadowsocks on server, your Shadowsocks&#x27;s local client can connect to localhost:8080 as server to forward traffic.
ameshkov6 个月前
I made a similar thing once to relay UDP traffic over WebSocket and it supports Cloudflare if needed: <a href="https:&#x2F;&#x2F;github.com&#x2F;ameshkov&#x2F;udptlspipe">https:&#x2F;&#x2F;github.com&#x2F;ameshkov&#x2F;udptlspipe</a><p>The use case is to relay WireGuard over TCP&#x2F;CF in a restrictive network, confirmed to work in China, obviously not too fast.
tomsonj6 个月前
chisel is a similar tool in this space <a href="https:&#x2F;&#x2F;github.com&#x2F;jpillora&#x2F;chisel">https:&#x2F;&#x2F;github.com&#x2F;jpillora&#x2F;chisel</a><p>I don’t get why headers and requests need to be spoofed if all traffic is over https?
评论 #42200828 未加载
评论 #42201386 未加载
评论 #42200669 未加载
评论 #42201273 未加载
peter_d_sherman6 个月前
&gt;&quot;Why CDNs?<p>Services like Cloudflare, Akamai Technologies, Fastly, and Amazon CloudFront are not only widely accessible but also integral to the global internet infrastructure. In regions with restrictive networks, alternatives such as CDNetworks in Russia, ArvanCloud in Iran, or ChinaCache in China may serve as viable proxies. These CDNs support millions of websites across critical sectors, including government and healthcare, making them indispensable.<p><i>Blocking them risks significant collateral [commercial, commerce] damage, which inadvertently makes them reliable pathways for bypassing restrictions.</i>&quot;<p>(There&#x27;s also TCP&#x2F;IP (Internet) via HAM radio (packet radio) and&#x2F;or StarLink (or more broadly, satellite Internet)...)<p>Observation: If a large enough commercial corporation has an interest relating to commerce (in whatever area), then if that commerce conflicts with a government block (foreign or domestic) of whatever sort, then the large commercial interest, given enought time, will usually (*) win (they can usually hire better Lawyers, foreign or domestic...)<p>(*) But not always...
评论 #42205926 未加载
a-ve6 个月前
Is this something like WebTunnel from the Tor Project?<p><a href="https:&#x2F;&#x2F;gitlab.torproject.org&#x2F;tpo&#x2F;anti-censorship&#x2F;pluggable-transports&#x2F;webtunnel" rel="nofollow">https:&#x2F;&#x2F;gitlab.torproject.org&#x2F;tpo&#x2F;anti-censorship&#x2F;pluggable-...</a>
buremba6 个月前
Is there any tool that does the other way around? I simply need an alternative to cloudflared tunnel (<a href="https:&#x2F;&#x2F;blog.cloudflare.com&#x2F;tunnel-for-everyone&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.cloudflare.com&#x2F;tunnel-for-everyone&#x2F;</a>) for exposing localhost port to a public domain that lets me supports anonymous clients. All cloud solutions charge based on users so they unfortunately doesn’t work
评论 #42211075 未加载
theblazehen6 个月前
How does this differ from tunneling a VPN over something like wstunnel?<p>We&#x27;ve been running that in prod for several years without any issues, also going through cloudflare
评论 #42323250 未加载
tripplyons6 个月前
Reminds me of how people forward requests through CloudFlare workers as a cheap way to get around IP-based rate limits.