search

grimpenmire / naiveproxy-deploy

A simple script to deploy naiveproxy to your own server
8 stars 0 forks source link

More Explanation needed #1

Open dinamycam opened 2 years ago

dinamycam commented 2 years ago

hi, thanks for the script. though, i wish there were more detailed explanations, should it be used with CDN, and if yes, should it be ran on a foreign server and i can't find any tutorial on using naiveproxy relay servers as i understand this is a work in progress, i will also be happy to help

grimpenmire commented 2 years ago

This does not work with a CDN, since naiveproxy uses CONNECT tunnels and CDNs in general do not support that. Not sure what you mean by "relay servers" though.

grimpenmire commented 2 years ago

The author is not in favor of using CDNs, but their situation in China and the reason they use CDNs, is quite different than ours. I'm thinking of forking naiveproxy myself and making it work through a CDN (maybe using an HTTP upgrade mechanism), but I'm still not sure about that.

dinamycam commented 2 years ago

This does not work with a CDN, since naiveproxy uses CONNECT tunnels and CDNs in general do not support that. Not sure what you mean by "relay servers" though.

about the relay servers, i mean like a proxy, so the route should look like this: client ---> iran relay server --> naiveproxy on a foreign server where iran server has a censored internet and the foreign server's outbound access is uncensored

the same architecture described was used in v2ray servers, where a proxy server is used to bypass the GFW

The author is not in favor of using CDNs, but their situation in China and the reason they use CDNs, is quite different than ours

ok, i will look into the project's documents

I'm thinking of forking naiveproxy myself and making it work through a CDN (maybe using an HTTP upgrade mechanism), but I'm still not sure about that. i'm not that fluent in http requests, protocol and ... but in writing configs, documentation, ... can do that.

grimpenmire commented 2 years ago

Some sort of transparent https proxy should in theory be able to relay naiveproxy traffic, but as far as I know the client does not natively support that. You'd need to proxify it somehow. But then, you might lose naiveproxy's anti-fingerprinting feature. All in all, this needs to be done with a lot of care. I'm still looking into it, hoping to find a good way.