mirror of
https://github.com/seriyps/mtproto_proxy.git
synced 2026-05-13 16:57:10 +00:00
9cf3e9e847
When a fake-TLS handshake fails (wrong secret, DPI probe, replay attack),
forward the raw TCP connection transparently to the SNI host instead of
closing — making the proxy indistinguishable from a normal HTTPS server.
Replay detection is moved to ClientHello level (before ServerHello) to
allow clean forwarding. Controlled by {domain_fronting, off|sni|"host:port"}.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
|
||
|---|---|---|
| .. | ||
| bench_codec_decode.erl | ||
| bench_codec_encode.erl | ||
| mtp_prop_gen.erl | ||
| mtp_test_client.erl | ||
| mtp_test_cmd_rpc.erl | ||
| mtp_test_datacenter.erl | ||
| mtp_test_echo_rpc.erl | ||
| mtp_test_metric.erl | ||
| mtp_test_middle_server.erl | ||
| prop_mtp_abridged.erl | ||
| prop_mtp_aes_cbc.erl | ||
| prop_mtp_codec.erl | ||
| prop_mtp_fake_tls.erl | ||
| prop_mtp_full.erl | ||
| prop_mtp_intermediate.erl | ||
| prop_mtp_obfuscated.erl | ||
| prop_mtp_rpc.erl | ||
| prop_mtp_statefull.erl | ||
| single_dc_SUITE.erl | ||
| test-sys.config | ||