greensea/obfstunnel

Customizable network traffic tunneling tool

obfstunnel

Customizable network traffic tunneling tool

With obfstunnel, you can forward your traffic through firewall. Currently we have xor and random obfs method.

obfstunnel works both on client and server. When a user likes to connect to another server outside a firewall, he could run obfstunnel in CLIENT mode on his own machine, and run obfstunnel in SERVER mode on another machine outside firewall. User should set up a target host he wants connect to on SERVER side. After doing this, you can connect to localhost, where obfstunnel listen on specified port. Once user connected to localhost, obfstunnel will encode traffic and send to obfstunnel on SERVER side. On SERVER side, obfstunnel will connect to target host which user wants to, and forward user traffic.

                             firewall
[user] <----> [obfstunnel] <---||---> [obfstunnel] <----> [target host]
       direct              obfuscating               direct

Example

Tunneling SSH through firewall

We are in machine A, and wants to SSH to server B, but we can not direct connect to server B via SSH because a firewall is block SSH connection. obfstunnel can help us.

We will use obfstunnel builtin obfs method, the xor method. It just XOR every byte with 0xFF. There is another builtin obfs method which name is random method. The random method could make traffic like random traffic, so firewall could not detect SSH connection and could not block it.

On server side, or server B, we run obfstunnel like this:

obfstunnel -s 2000 -t localhost:22 -m xor

-s 2000 argument cause obfstunnel runs in SERVER mode and listen on port 2000 waiting for client connection.

-t localhost:22 tell obfstunnel forward traffic to localhost, where SSH service run on port 22.

-m xor tell obfstunnel to use xor obfs method.

On client side, or machine A, run obfstunnel like this:

obfstunnel -c 22 -t 1.1.1.1:2000 -m xor

-c 22 cause obfstunnel runs in CLIENT mode, waiting user connection on port 22.

-t 1.1.1.1:2000 tells obfstunnel where server is located. 1.1.1.1 is IP address of server A, 2000 is the port obfstunnel in SERVER mode listen on.

Now run ssh localhost , you will find you are connecting to server B.

obfstunnel's Issues

REVERSE TUNNELING, could be an very util function..

Reverse Tunneling, when a Server calls to an listener client,
very important option to add.

Could be possible?

can't access https://www.facebook.com

the command line is: -m random,salt=google,padlen=36,maxlen=1400

I can get result via:
curl -Lv --socks5 127.0.0.1:10800 https://www.google.com

but can't get result via:
curl -Lv --socks5 127.0.0.1:10800 https://www.facebook.com

could you please help me?

这样make出来的obfstunnel正常吗

hi.

root@AR:/obfstunnel# ls
COPYING obfstunnel.c README.md udpsession.c
Makefile obfstunnel.h README.zh_CN udpsession.h
root@AR:/obfstunnel# make
gcc obfstunnel.c udpsession.c -o obfstunnel -O2 -Wall
obfstunnel.c: 在函数‘ot_tunneling_tcp_server’中:
obfstunnel.c:397:13: 警告：变量‘writeb’被设定但未被使用 [-Wunused-but-set-variable]
int readb, writeb;
^
obfstunnel.c: 在函数‘ot_accept_client’中:
obfstunnel.c:661:6: 警告：变量‘flags’被设定但未被使用 [-Wunused-but-set-variable]
int flags;
^
root@AR:/obfstunnel# ls
COPYING obfstunnel obfstunnel.h README.zh_CN udpsession.h
Makefile obfstunnel.c README.md udpsession.c
root@AR:/obfstunnel#