Local DNS/TLS proxy written in Go. Bypasses DPI firewalls and DNS poisoning using Cloudflare DoH and TLS ClientHello fragmentation — splits the initial handshake into configurable chunks so the firewall can't read the SNI. Configurable bypass list via bypass-domains.txt, automatic system proxy management on start/exit, pre-built binaries for macOS and Windows. Set BYPASS_ALL=true to route everything through the pipeline.
Local DNS/TLS proxy written in Go. Bypasses DPI firewalls and DNS poisoning using Cloudflare DoH and TLS ClientHello fragmentation — splits the initial handshake into configurable chunks so the firewall can't read the SNI. Configurable bypass list via bypass-domains.txt, automatic system proxy management on start/exit, pre-built binaries for macOS and Windows. Set BYPASS_ALL=true to route everything through the pipeline.