# denuitt1/mhr-cfw

A Domain-Fronting Relay that routes traffic though GAS (Google Apps Script) and forwards it to Cloudflare Workers. Designed to bypass DPI.

Repository: https://github.com/denuitt1/mhr-cfw
Canonical: https://ross.abutalabs.com/products/mhr-cfw
Language: Python
License: MIT
License Family: permissive
Topics: cloudflare-workers, domain-fronting, dpi, dpi-bypass, mitm, proxy, google-apps-script, http, sni
Last push: 2026-05-10T20:40:46+00:00

## Health v2 (maintenance only)
Score: 67/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 81, release rhythm 83, longevity 9
- inputs: {"age_days": 128, "days_push": 115, "days_rel": 115, "gap_med": 4, "n_releases_24m": 4}
- flags: young
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 4403, forks 413 (observed 2026-08-28T04:08:48.315529+00:00)

## What it is
A Python-based MITM domain-fronting relay that routes HTTP traffic through Google Apps Script and Cloudflare Workers so network DPI filters only see allowed domains like www.google.com. It includes deployable relay scripts (Code.gs, worker.js) and an optional self-hosted upstream forwarder for the exit path.

## Use cases
- bypass DPI-based internet censorship
- route traffic through Google domains to evade SNI filtering
- tunnel HTTP through Google Apps Script and Cloudflare Workers
- circumvent network restrictions in censored regions
- hide real destination from network-level traffic inspection
- set up a personal anti-censorship proxy with free Google and Cloudflare tiers

## When to choose
- you need to bypass DPI/SNI filtering that blocks VPN and proxy protocols
- you want a censorship-circumvention relay built on free Google Apps Script and Cloudflare Workers infrastructure
- your network only allows traffic to major domains like google.com and you need to reach the open web
- you prefer a self-hosted relay you control with a password-protected auth key

## When to avoid
- you need high-throughput or low-latency traffic like gaming or video streaming, since relay chaining adds overhead
- you need non-HTTP protocols or full VPN-style tunneling rather than HTTP relaying
- your threat model requires strong anonymity, since Google and Cloudflare can observe relayed traffic
- you cannot deploy to Google Apps Script or Cloudflare Workers, or those services are blocked in your region

## Facets
- artifact type: service
- maturity: active
- function: proxy, networking, http-client, http-server, security, privacy, cryptography
- domain: privacy, censorship-circumvention, networking, security, self-hosted, web-development
- platform: python, cloud, self-hosted, cross-platform, cli
- tags: domain-fronting, dpi-bypass, google-apps-script, cloudflare-workers, mitm-relay, anti-censorship, sni-masking, traffic-obfuscation, internet-freedom, sanctions-bypass, web-server

## Member repositories
- denuitt1/mhr-cfw (main) score 67

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:48.315529+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:21:07.112026+00:00, confidence not recorded.
  - readme: https://github.com/denuitt1/mhr-cfw (fetched 2026-08-28T04:08:48.315529+00:00, sha 37acb81dc268)
- Data as of 2026-08-30T08:39:29.467469+00:00.