IssueRaiser

Selective ("smart") proxying

This issue is to track selective proxying (also known as "smart routing") on the Outline clients and gather feedback and input from the community. # Why? There's large demand for not proxying what is not blocked. Some reasons: - **Performance**, especially to access domestic websites. Proxying domestic traffic crosses the national border twice in each direction, drastically reducing performance. - **Client Cost**: Some countries charge more for for international traffic. Proxying also breaks the zero-rating done by some ISPs. - **Provider Cost**: Cost is a bottleneck for service providers, and they often have to limit the number of people they help to limit their expenses. Reducing costs can enable providers to help more people. - **Blocking resistance**: all traffic going to a single server is suspicious. Also, there is a [report](https://github.com/net4people/bbs/issues/129#issuecomment-1308102504) that the GFW may correlate up and downstream traffic when a user uses a proxy to access domestic servers. - **Geo restrictions**: many payment platforms require your IP to be in the country you claim to be. # Approaches ## Bypass Domestic traffic Intercept all DNS traffic: - If the requested domain ends with a ccTLD of the user's country, use the system resolver. Otherwise, use the Outline server resolver. - The assumption is that the domestic domains are unblocked, since they are under control of the government. On TCP or UDP connection: - Map the IP address to country

Posted by fortuna on Nov 11, 2020, 10:05 PM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.3,000 issues0 comments

pricing (FinTech)

Selective ("smart") proxying

fortunaNov 11, 2020, 10:05 PM

This issue is to track selective proxying (also known as "smart routing") on the Outline clients and gather feedback and input from the community. # Why? There's large demand for not proxying what is not blocked. Some reasons: - **Performance**, especially to access domestic websites. Proxying domestic traffic crosses the national border twice in each direction, drastically reducing performance. - **Client Cost**: Some countries charge more for for international traffic. Proxying also breaks the zero-rating done by some ISPs. - **Provider Cost**: Cost is a bottleneck for service providers, and they often have to limit the number of people they help to limit their expenses. Reducing costs can enable providers to help more people. - **Blocking resistance**: all traffic going to a single server is suspicious. Also, there is a [report](https://github.com/net4people/bbs/issues/129#issuecomment-1308102504) that the GFW may correlate up and downstream traffic when a user uses a proxy to access domestic servers. - **Geo restrictions**: many payment platforms require your IP to be in the country you claim to be. # Approaches ## Bypass Domestic traffic Intercept all DNS traffic: - If the requested domain ends with a ccTLD of the user's country, use the system resolver. Otherwise, use the Outline server resolver. - The assumption is that the domestic domains are unblocked, since they are under control of the government. On TCP or UDP connection: - Map the IP address to country

Comments (0)

No comments yet. Start the discussion.

Comment on this issue