CLOUDFLARE TUNNEL V2RAY SOFTWARE

Iptables -t mangle -A XRAY_SELF -d 1.0.0.1/32 -j RETURN Iptables -t mangle -A XRAY_SELF -p udp -j MARK -set-mark 1 Iptables -t mangle -A XRAY_SELF -p tcp -j MARK -set-mark 1 Iptables -t mangle -A XRAY_SELF -m mark -mark 0xff -j RETURN Iptables -t mangle -A XRAY_SELF -d 192.168.0.0/16 -p udp ! -dport 53 -j RETURN Iptables -t mangle -A XRAY_SELF -d 192.168.0.0/16 -p tcp ! -dport 53 -j RETURN Iptables -t mangle -A XRAY_SELF -d 240.0.0.0/4 -j RETURN Iptables -t mangle -A XRAY_SELF -d 224.0.0.0/4 -j RETURN Iptables -t mangle -A XRAY_SELF -d 192.0.0.0/24 -j RETURN Iptables -t mangle -A XRAY_SELF -d 172.16.0.0/12 -j RETURN Iptables -t mangle -A XRAY_SELF -d 127.0.0.0/8 -p udp ! -dport 53 -j RETURN Iptables -t mangle -A XRAY_SELF -d 100.64.0.0/10 -j RETURN Iptables -t mangle -A XRAY_SELF -d 10.0.0.0/8 -j RETURN #Cloudflare’s IPs, My v2ray is behide cloudflare Iptables -t mangle -A XRAY -p udp -j TPROXY -on-port 12346 -tproxy-mark 1 Iptables -t mangle -A XRAY -p tcp -j TPROXY -on-port 12346 -tproxy-mark 1 Iptables -t mangle -A XRAY -d 240.0.0.0/4 -j RETURN

Iptables -t mangle -A XRAY -d 224.0.0.0/4 -j RETURN

Iptables -t mangle -A XRAY -d 192.0.0.0/24 -j RETURN Iptables -t mangle -A XRAY -d 127.0.0.0/8 -p udp ! -dport 53 -j RETURN Iptables -t mangle -A XRAY -d 10.0.0.0/8 -j RETURN Iptables -t mangle -A XRAY -d 1.1.1.1/32 -j RETURN Iptables -t mangle -A XRAY -d 1.0.0.1/32 -j RETURN Iptables -t mangle -A XRAY -d 223.5.5.5/32 -j RETURN Ip route add local 0.0.0.0/0 dev lo table 100 My iptables configuration: ip rule add fwmark 1 table 100 I don't know if the information on the internet is outdated or if my device is special, I hope someone can help point out the problem. The 'firewall' settings in OpenWrt have not been changed, and '_forward=1' has been set correctly. I checked a lot of information, according to the information on the Internet to configure: stop dnsmasq, use xray to handle all the DNS of port 53.Īt first it's OK (with 'curl '), but after a minute or so, it can not access the Internet. Now I'm trying to set up a global proxy in OpenWrt to breach the Great Firewall (I can breach the Great Firewall normally with socks). DNS with DNS-over-HTTP, SNI with eSNI, and IP blocking has become less plausible already through routine use of proxies like Cloudflare.My device is GL-iNet, version is 'OpenWrt 21.02.1 r16325-88151b8303', I use XRAY (V2ray compatible), through cloudflare's CDN to pass the Great Firewall in China. If not, then what's their plan for the future? I could see a Firewall kind of mostly working for now on a combination of DNS, IP, and SNI filtering, but all three are going away in the near term. Does China not have agreements with most external services about stripping TLS such that a lot of TLS traffic would be suspect? Or do they not mandate their citizens to use a Government provided root cert that would allow them to 'securely' MITM connections? That would be how I'd do it if I were an authoritarian government. The remaining question for me is about the TLS part of all this. I guess just your own server without Cloudflare would work fine for a while, but they probably have heuristics for a lot of encrypted traffic sent to a single unknown server? I assume the point of using your own server + Cloudflare is that it breaks IP based blocking of most VPN providers.

CLOUDFLARE TUNNEL V2RAY SOFTWARE

From it seems that it's 'just' a VPN protocol / software that can tunnel over TLS.

Cloudflare tunnel v2ray