Tags: teleproxy/teleproxy
Tags
Fix macOS backend-forward path; add --no-mss-clamp disable knob. ENOTCONN on connect()-in-progress sockets is now treated as a retry condition (Linux returns EAGAIN here; BSD/Darwin returns ENOTCONN). Five fake-TLS E2E tests that silently failed on the macOS dev build now pass alongside Linux. Also exposes a disable knob for the v4.14.0 automatic MSS clamp: mss_clamp = false (TOML), --no-mss-clamp (CLI), or MSS_CLAMP=false (start.sh env). Default stays on.
Automatic ClientHello fragmentation against TSPU JA4 fingerprinting. The MTProxy listening socket now announces a 256-byte TCP MSS in the SYN-ACK, forcing the client kernel to fragment outgoing ClientHello across 2-3 TCP segments. ALPN and signature_algorithms land in segment 2/3, so single-packet JA4 extractors compute the wrong hash. No configuration; no client change required. Refs #39.
v4.12.0 — metric correctness + Docker port/label fixes - Fix teleproxy_secret_unique_ips always reporting 0 (#70). Counter was guarded behind max_ips/rate_limit; plain secrets now tracked too. Type changed from gauge to counter to reflect cumulative behaviour. - Clarify bytes_received_total / bytes_sent_total HELP text — direction is from the proxy's perspective, not the client's. - Fix Docker SECRET=hex:label,hex:label parsing in start.sh (#67); now emits a separate label TOML line as the numbered-secret path does. - Add EXTERNAL_PORT env var and matching external_port TOML option for advertising a different port in the connection link than the internal listen port (#66) — needed under Docker -p host:container mappings.
PreviousNext