Ysurac / openmptcprouter

OpenMPTCProuter is an open source solution to aggregate multiple internet connections using Multipath TCP (MPTCP) on OpenWrt
https://www.openmptcprouter.com/
GNU General Public License v3.0
1.71k stars 252 forks source link

Feasibility of using OMR with highly restricted WAN, only access to TCP ports 80 & 443 #3385

Open Gitfoe opened 3 weeks ago

Gitfoe commented 3 weeks ago

I'm considering OMR for WAN bonding, but I have a specific scenario that raises a question. One of my WAN connections restricts most internet access, allowing only outgoing connections to TCP ports 80 and 443. Since OMR typically uses ports 65000-65535, is it still possible to use OMR to aggregate both UDP and TCP traffic over this WAN interface? For example, would it be feasible to move Shadowsocks to TCP port 443 and tunnel both UDP and TCP traffic through Shadowsocks?

Ysurac commented 3 weeks ago

You can use XRay VLESS Reality proxy, that use port 443, in System->OpenMPTCProuter, Wizard tab, "advanced settings" checkbox, set XRAY VLESS REality as proxy and disable the VPN, then set in "Advanced settings" tab, the checkbox "V2Ray/XRay UDP".

Gitfoe commented 2 weeks ago

Thank you for your quick comment. This works!

The only thing that I'm currently having an issue with is DNS. If all the unrestricted WANs are down, DNS lookup requests do not work for the restricted WAN. Outgoing port 53 (DNS) is blocked on this WAN (only TCP 80 and 443 are available). Unsure why it wouldn't work though, as this suggests DNS traffic is not routed through to the VPS by default. Moreover, the Server Admin Script can't be contacted, as it's running on port 65222, but I don't believe this may cause the issue?

This only happens when my end device's DNS is set to 192.168.100.1. DNS works when I manually set the end device to an arbitrary DNS such as 8.8.8.8.

Ysurac commented 2 weeks ago

Without the VPN, possible that DNS doesn't use the proxy locally... I need to check that. Maybe also possible to use DNS over HTTPS