mirrors/dae
1
0
Fork 0
mirror of https://github.com/daeuniverse/dae.git synced 2024-12-23 01:24:45 +07:00
Code Issues Packages Projects Releases Wiki Activity
eBPF-based Linux high-performance transparent proxy solution.
401 Commits 15 Branches 54 Tags 10 MiB
Go 63.6%
Perl 25.2%
C 9.7%
Shell 0.9%
Makefile 0.4%
0312afaf0d
Go to file
mzz2017 0312afaf0d chore: built-in errno-base.h
2023-04-01 23:38:57 +08:00
.github/workflows chore: Add geodata and systemd service file into zip file when releasing (#50) 2023-03-30 14:59:57 +08:00
cmd chore: refine reloading code 2023-03-30 23:28:51 +08:00
common feat: support reject in dns request routing 2023-03-31 15:46:53 +08:00
component fix: problem that cannot use unsorted ip set in dns response routing 2023-03-31 23:36:24 +08:00
config fix: problem that cannot use unsorted ip set in dns response routing 2023-03-31 23:36:24 +08:00
control chore: built-in errno-base.h 2023-04-01 23:38:57 +08:00
docs docs: extend kernel config requirements recommendation 2023-03-31 23:44:15 +08:00
install ci: Add amd64_v2 and amd64_v3 build (#38) 2023-03-24 01:09:45 +08:00
pkg fix: problem that cannot use unsorted ip set in dns response routing 2023-03-31 23:36:24 +08:00
.gitignore Revert "chore: include compiled file for lib use" 2023-03-03 15:33:31 +08:00
.gitmodules chore: transferred to daeuniverse 2023-03-14 15:01:55 +08:00
CODEOWNERS chore: transferred to daeuniverse 2023-03-14 15:01:55 +08:00
docker-compose.yml chore: support docker. fix #30 2023-03-04 13:16:26 +08:00
Dockerfile feat: shorten docker command arguments by leveraging CMD (#35) 2023-03-14 17:21:25 +08:00
example.dae chore(example.dae): indent 2023-03-29 18:14:40 +08:00
go.mod fix/optimize: fix https h2 problem and add h2 mutiplex 2023-03-27 21:44:13 +08:00
go.sum fix/optimize: fix https h2 problem and add h2 mutiplex 2023-03-27 21:44:13 +08:00
insert.sh feat: reject packet sent to tproxy port directly for security 2023-02-13 03:41:59 +08:00
LICENSE init 2023-01-23 19:54:21 +08:00
logo.png init 2023-01-23 19:54:21 +08:00
main.go fix/optimize: fix https h2 problem and add h2 mutiplex 2023-03-27 21:44:13 +08:00
Makefile optimize: add a new link for network check 2023-03-19 12:26:09 +08:00
README.md docs(README): add starchart 2023-03-30 16:43:56 +08:00

README.md

dae

dae, means goose, is a high-performance transparent proxy solution.

In order to improve the traffic split performance as much as possible, dae runs the transparent proxy and traffic split suite in the linux kernel by eBPF. Therefore, dae has the opportunity to make the direct traffic bypass the forwarding by proxy application and achieve true direct traffic through. Under such a magic trick, there is almost no performance loss and additional resource consumption for direct traffic.

As a successor of v2rayA, dae abandoned v2ray-core to meet the needs of users more freely.

Features

  1. Implement Real Direct traffic split (need ipforward on) to achieve high performance.
  2. Support to split traffic by process name in local host.
  3. Support to split traffic by MAC address in LAN.
  4. Support to split traffic with invert match rules.
  5. Support to automatically switch nodes according to policy. That is to say, support to automatically test independent TCP/UDP/IPv4/IPv6 latencies, and then use the best nodes for corresponding traffic according to user-defined policy.
  6. Support advanced DNS resolution process.
  7. Support full-cone NAT for shadowsocks, trojan(-go) and socks5 (no test).

Getting Started

Please refer to Quick Start Guide to start using dae right away!

Notes

  1. If you setup dae and also a shadowsocks server (or any UDP servers) on the same machine in public network, such as a VPS, don't forget to add l4proto(udp) && sport(your server ports) -> must_direct rule for your UDP server port. Because states of UDP are hard to maintain, all outgoing UDP packets will potentially be proxied (depends on your routing), including traffic to your client. This behaviour is not what we want to see. must_direct makes all traffic from this port including DNS traffic direct.
  2. If users in mainland China find that the first screen time is very long when they visit some domestic websites for the first time, please check whether you use foreign DNS to handle some domestic domain in DNS routing. Sometimes this is hard to spot. For example, ocsp.digicert.cn is included in geosite:geolocation-!cn unexpectedly, which will cause some tls handshakes to take a long time. Be careful to use such domain sets in DNS routing.

How it works

See How it works.

TODO

  • Automatically check dns upstream and source loop (whether upstream is also a client of us) and remind the user to add sip rule.
  • MACv2 extension extraction.
  • Log to userspace.
  • Protocol-oriented node features detecting (or filter), such as full-cone (especially VMess and VLESS).
  • Add quick-start guide
  • ...

Stargazers over time

Stargazers over time