Telegram
Hs in Project X
You are right about the insecurity of http traffic. But why did you accuse that these people cooperate with gfw...? We are more upset that you falsely accused your colleague. They worked for several years to develop this project If you think that you are…
https://github.com/XTLS/Xray-core/pull/3884#issuecomment-2621403340
总的来说就是,WCNM,NMSL,没长眼睛不看已有讨论建议去挖掉
已经很烦了,再有人不看已有讨论让我一遍遍重复,我的态度就是 WCNM,NMSL,浪费老子时间,被骂都是自找的
已经很烦了,再有人不看已有讨论让我一遍遍重复,我的态度就是 WCNM,NMSL,浪费老子时间,被骂都是自找的
😁38👍12
当遇到你这样的傻逼多了,你的态度也不会好,本想言论自由不 ban 人,天天有人非要在我面前拉屎,一个问题让我一天重复 N 遍,CNM
👍42😁14⚡2🔥1
Telegram
ariya in Project X
The GFW firewall detects it much better than Cloudflare or any other CDN company. With this ridiculous padding in the headers, you will do nothing but block user cdn accounts. It is better to leave your own mode as the default and as a suggestion, and if…
我不认为关掉 x_padding 就能防止你的账户被检测到搭建了代理,因为还有其它很多固定 pattern,建议你注册个新号专门用于代理
👍10👀3
Telegram
(:----PaRaZiT----:) in Project X
You consider yourself very professional. It's like you're doing a trip to the moon project.
I have not seen a project with this level of old bugs and awful documentation
Be realistic. I do not intend to offend
I have not seen a project with this level of old bugs and awful documentation
Be realistic. I do not intend to offend
我不懂你们这些伊朗人到底怎么回事,如果有 bug,就去开 issue,而不是在这里虚空 old bugs,再说即使有 old bugs 那也是 v2ray 的代码
😁23👀1
Telegram
(:----PaRaZiT----:) in Project X
Unfortunately, you have communist thoughts, otherwise you would not have published the v2rayng program with China's geo.
You want everything for yourself and if you don't have access to it, you intend to destroy it, for example, destroying the 3x-ui project
You want everything for yourself and if you don't have access to it, you intend to destroy it, for example, destroying the 3x-ui project
我并不控制 v2rayNG,从今天起像这种人直接 ban 了,一个接一个没完了,真的浪费时间,本来要写 release notes 结果只顾着喷傻逼了
👍54😁11❤2
Telegram
ariya in Project X
Yes, thank you for your suggestion. This is exactly one of the problems with the R boss's lack of stability. From day one, it does not specify the parameters of a transmission in a standard way and over time, it changes many parameters independently. I am…
对于一个持续开发的协议,改配置字段是不可避免的,所以我直接把它们扔 extra 了,隔壁还天天大改基础配置文件格式
在 v25.1.30 中,x_padding 还与 stream-up 的上行强相关,所以干脆不允许关闭了,关闭它的唯一好处就是避免被 CDN 检测,然而目前未出现 CDN 封锁 x_padding 的报告,且代理的特征无法对 CDN 全部隐藏,最佳解决方案是注册另一个账号,以避免未来可能的封禁
在 v25.1.30 中,x_padding 还与 stream-up 的上行强相关,所以干脆不允许关闭了,关闭它的唯一好处就是避免被 CDN 检测,然而目前未出现 CDN 封锁 x_padding 的报告,且代理的特征无法对 CDN 全部隐藏,最佳解决方案是注册另一个账号,以避免未来可能的封禁
👍15🔥3❤1
Telegram
ariya in Project X
We don't need another account. Please back again "turn off the padding settings."
我说了,关闭 x_padding 就能避免被 CDN 检测只是你的意淫,XHTTP 的传输模式、VLESS 的明文字段等都能被 CDN 检测,所以你要是真担心被 CDN 封号,只能注册另一个专用于代理
👍15
Telegram
ariya in Project X
2025 has become a ridiculous year, from the cutoff of x-ui and 3x-ui funds, to the R boss who apparently was asked by CDN companies to mark users and block Cloudflare overnight.
给你讲技术就是不听,怎么又是一个自以为是、不讲道理的伊朗人?
Update:修改了陈述以避免翻译错误
我真的以为频道出现了一个还算正常的伊朗人,结果还是一样,唉
Update:修改了陈述以避免翻译错误
我真的以为频道出现了一个还算正常的伊朗人,结果还是一样,唉
😁21👍3
Telegram
mh in Project X
Why do you judge all the people of a country?
I'm not doing that. It's just my feeling after the past few days.
😁18
Telegram
Ghost in Project X
能不能快进到理解世界成为世界啊,看着烦
已经快了,主要是我还没有群里的权限,昨天已经向 Arthur 询问有没有通过 BOT ban 人的方法了,以后来一个 ban 一个,不浪费时间
😁25👍8❤2👀1
Telegram
ariya in Project X
I didn't leave a message anywhere, just one thing about xui panels, if for example there are ten detection methods to detect traffic for cdn, leave them all out and just the existence of padding will simplify the task for them
如果 CDN 想封禁代理,没了 x_padding 这个特征,CDN 就会开始去针对其它特征,所以提前行动是没有意义的,这个已经讨论过
👍11👀2
Telegram
Musixa in Project X
So you are saying that because there are multiple characteristics at xhttp for CDN, it's not meaningful to fix any of them
good logic 👍
good logic 👍
Go fix your logical brain. I'm not saying it's not meaningful, I mean it's meaningful only after CDN takes action first.
👀9🎉2👍1
Telegram
Musixa in Project X
I don't understand why we should let them Act first
it's like adding a characteristic to a protocol and wait until GFW add a new rule for it, and then fix
it's like adding a characteristic to a protocol and wait until GFW add a new rule for it, and then fix
因为你无法对 CDN 掩盖所有的代理特征,就是说一定会有特征,你先掩盖完你认为的特征后,CDN 想封你的话就会针对其它特征
对于 GFW,你还可以假装自己是 HTTPS,但对于 CDN 则不行
对于 GFW,你还可以假装自己是 HTTPS,但对于 CDN 则不行
👍18
Telegram
Musixa in Project X
Fix other characteristics also, different upstream and downstream is already supported
vmess exist for no protocol header
other are also possible to fix
vmess exist for no protocol header
other are also possible to fix
我说了有特征就是有特征,VMess 的特征就是全随机数,CDN 当然也能检测到,建议你没有专业知识就不要跟我争这种话题,浪费时间
还有,上下行分离目前是靠同路径来关联的,也是 CDN 能看到的特征
还有,上下行分离目前是靠同路径来关联的,也是 CDN 能看到的特征
👍21
Telegram
Musixa in Project X
they have millions of customers, people use CDN for many different purposes
they can't just ban someone because of transferring encrypted random data
they can't just ban someone because of transferring encrypted random data
在 TLS 内再加密一层本身就不常见,除非你要对 CDN 隐瞒些什么,一你加密成全随机数,二它的流量相较于正常 HTTP 占比过高,就足够封你了,更别说 Xray 是开源的,失去了 TLS 的保护总能找到针对方法
总之,CDN 期待的是你传输正常 HTTP 网站流量,而不是一堆全随机数
总之,CDN 期待的是你传输正常 HTTP 网站流量,而不是一堆全随机数
👍28⚡2
Telegram
Musixa in Project X
They support websocket and grpc, are they for normal HTTP? no, they support many different things and high traffic encrypted traffic is not enough for them to block some users
they even added MQTT support i guess, these are not for regular HTTP traffic
keeping…
they even added MQTT support i guess, these are not for regular HTTP traffic
keeping…
?XHTTP 用的就是 normal HTTP,不然怎么穿透众多 CDN
😁8
Telegram
Musixa in Project X
isn't stream-up and packet-up grpc or events?
it was not my reason anyway, i mean even in HTTP form, there is a lot of applications that transters encrypted data like APIs or specific applications
it was not my reason anyway, i mean even in HTTP form, there is a lot of applications that transters encrypted data like APIs or specific applications
XHTTP 的 gRPC 和 SSE 只是 fake header,数据并不遵循它们的格式
我知道你的意思,我’想说,CDN 总能找到你的特征,不限于全随机数
我知道你的意思,我’想说,CDN 总能找到你的特征,不限于全随机数
👍13
Telegram
ちおれい in Project X
这确实有点与在明文 HTTP 被作为证据指控当事人所以现在先强制 HTTPS的倾向有些违背,强制HTTPS和能删减x_padding都是出于先发制人的想法,既然不能删掉 x_padding 那么能不能提供方式修改该头呢
这两个并不是一回事,威胁模型完全不同,甚至 CDN 不一定算是威胁
👍7😁1👀1