# GFW-knocker/gfw_resist_tls_proxy

knock up GFW sni detection in tls client hello

Repository: https://github.com/GFW-knocker/gfw_resist_tls_proxy
Canonical: https://ross.abutalabs.com/products/gfw_resist_tls_proxy
Language: Python
License: GPL-3.0
License Family: copyleft
Last push: 2024-01-16T08:24:12+00:00

## Health v2 (maintenance only)
Score: 30/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 87
- inputs: {"age_days": 1227, "days_push": 960, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1708, forks 221 (observed 2026-08-28T04:05:25.489801+00:00)

## What it is
A set of Python proof-of-concept scripts (notably pyprox and randchunk) that fragment TLS Client Hello packets to evade SNI-based deep packet inspection used by the GFW and Iranian filtering systems. It acts as a local proxy that splits TLS handshakes into random chunks so censors cannot read the requested domain.

## Use cases
- bypass SNI-based TLS filtering
- access blocked websites like YouTube and Twitter without a VPN server
- fragment TLS client hello packets to evade DPI
- route traffic through clean Cloudflare IPs
- tune fragmentation parameters for different Iranian ISPs
- run a local censorship-resistant HTTPS proxy

## When to choose
- you need a lightweight script-based DPI evasion tool without a VPN server
- you are on an Iranian ISP and want to tune fragment counts and delays for your network
- you want a proof-of-concept to build fragmentation into your own proxy client

## When to avoid
- you need a polished end-user VPN application with a GUI
- you need guaranteed, maintained production software
- your censorship environment does not rely on SNI-based TLS inspection
- you need support or documentation beyond community forks

## Facets
- artifact type: cli-tool
- maturity: experimental
- function: proxy, networking, security, privacy
- domain: censorship-circumvention, privacy, networking, security
- platform: python, cross-platform, cli
- tags: tls-fragmentation, gfw-circumvention, dpi-evasion, sni-bypass, cloudflare, iran-censorship, proxy

## Member repositories
- GFW-knocker/gfw_resist_tls_proxy (main) score 30

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:25.489801+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:36:59.270715+00:00, confidence not recorded.
  - readme: https://github.com/GFW-knocker/gfw_resist_tls_proxy (fetched 2026-08-28T04:05:25.489801+00:00, sha c5e3b6095cb3)
- Data as of 2026-08-30T08:39:29.467469+00:00.