GFW-knocker/gfw_resist_tls_proxy

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1708 stars · 221 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A set of Python proof-of-concept scripts (notably pyprox and randchunk) that fragment TLS Client Hello packets to evade SNI-based deep packet inspection used by the GFW and Iranian filtering systems. It acts as a local proxy that splits TLS handshakes into random chunks so censors cannot read the requested domain.

Use cases

• bypass SNI-based TLS filtering
• access blocked websites like YouTube and Twitter without a VPN server
• fragment TLS client hello packets to evade DPI
• route traffic through clean Cloudflare IPs
• tune fragmentation parameters for different Iranian ISPs
• run a local censorship-resistant HTTPS proxy

When to choose

• you need a lightweight script-based DPI evasion tool without a VPN server
• you are on an Iranian ISP and want to tune fragment counts and delays for your network
• you want a proof-of-concept to build fragmentation into your own proxy client

When to avoid

• you need a polished end-user VPN application with a GUI
• you need guaranteed, maintained production software
• your censorship environment does not rely on SNI-based TLS inspection
• you need support or documentation beyond community forks

Facets

cli-tool · maturity experimental

proxy networking security privacy censorship-circumvention privacy networking security python cross-platform cli tls-fragmentation gfw-circumvention dpi-evasion sni-bypass cloudflare iran-censorship proxy

Member repositories

For agents

markdown · JSON · MCP: product_card(name="GFW-knocker/gfw_resist_tls_proxy")