shadowsocks / shadowsocks-rust

A Rust port of shadowsocks
https://shadowsocks.org/
MIT License
8.38k stars 1.15k forks source link

Ability to log full url path #1188

Closed laspera closed 1 year ago

laspera commented 1 year ago

I see that there already was asked about this https://github.com/shadowsocks/shadowsocks-rust/issues/681

But it that would be a really nice feature for metrics or something like these, I'm not seeing this thing in other shadowsocks server impls and would like to see it here

zonyitoo commented 1 year ago

It won't be possible for TLS or QUIC connections to see the full url path. This feature will only works in HTTP/1.1 and HTTP/1.0.

I still don't think this is worth to do. Or do you have any good suggestions about how to implement it?

laspera commented 1 year ago

Nah I don't really have any suggestions, but does https also encode url path?

zonyitoo commented 1 year ago

Yes, of course. Since there is no possible way, closing.

laspera commented 1 year ago

Is there any other alternative proxy that will achieve this? I mean maybe wireguard or squid3 etc.

zonyitoo commented 1 year ago

No. It is possible only if you can decrypt TLS data chunks. One of the design goal of TLS is to protect data from any third-party, your proxy server is the third-party middleman between you and the destination target server.