search

sonertari / SSLproxy

Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection
BSD 2-Clause "Simplified" License
389 stars 102 forks source link

Secondary traffic #75

Open alisaosipova opened 3 months ago

alisaosipova commented 3 months ago

Can I not create a reverse connection for secondary traffic from divert-proxy, but go through the connection that has already been created? If yes, then how. Or at least where it is in the source code so that I can study it myself

alisaosipova commented 3 months ago

image

I want to delete this connection here. To record what happened.

sonertari commented 3 months ago

If the listening program does not return the packets to SSLproxy (the connection you crossed over in the diagram), it is effectively disabled. I don't think I can find where in the sources to do that, probably it's all over the proxy code.

alisaosipova commented 3 months ago

I use as a divert, a regular echo-tcp-server (listens to 127.0.0.1 8080), which sends (write) what it receives. It writes information to the same connection that it received. The problem is that the SSLproxy implementation does not allow this, and the proxy freezes halfway through. Could you tell me what to do, where to look in the source code to fix this? It might be worth sending some data earlier, etc. thx for answer

alisaosipova commented 3 months ago

can i transfer all child connections to parent connections when i use divert? That is, I want to remove child connections, but keep all divert functions

sonertari commented 3 months ago

It's way more complicated than what you think. That would be a very different project.

alisaosipova commented 3 months ago

It's way more complicated than what you think. That would be a very different project.

What should I know when performing this task that you could share? I'm currently reworking protohttp, reworking read/write callbacks. response/request headers

alisaosipova commented 3 months ago

and another question. Can I add a divert branch in split mode?