NAT Support All of the 3 modes work in NAT environments. Multiple Clients One server can have multiple clients. Multiplexing One client can handle multiple UDP connections, all of which share the same raw connection. If reconnection is successful, the previous connection will be recovered, and all existing UDP conversations will stay vaild.įor example, if you use udp2raw + OpenVPN, OpenVPN won't lose connection after any reconnect, even if network cable is re-plugged or WiFi access point is changed. If timed-out, client will automatically change port number and reconnect.
Notes on encryption Failure Dectection & Stabilization (Connection Recovery)Ĭonection failures are detected by heartbeats. Defense replay attack with anti-replay window.Protect data integrity by HMAC-SHA1 (or weaker MD5/CRC32).So there wont be any TCP over TCP problem when using OpenVPN. Firewalls will regard FakeTCP as a TCP connection, but its essentially UDP: it supports real-time/out-of-order delivery(just as normal UDP does), no congestion control or re-transmission. It also simulates a few TCP options such as: MSS, sackOk, TS, TS_ack, wscale. In FakeTCP header mode,udp2raw simulates 3-way handshake while establishing a connection,simulates seq and ack_seq while data transferring. Simulated TCP with Real-time/Out-of-Order Delivery In UDP header mode, it behaves just like a normal UDP tunnel, and you can just make use of the other features (such as encryption, anti-replay, or connection stabilization). In ICMP header mode,udp2raw works like an ICMP tunnel. ICMP/FakeTCP headers help you bypass UDP blocking, UDP QOS or improper UDP NAT behavior on some ISPs.
Features Send/Receive UDP Packets with ICMP/FakeTCP/UDP headers Linux host (including desktop Linux,Android phone/tablet,OpenWRT router,or Raspberry PI) with root account or cap_net_raw capability.įor Windows and MacOS users, use the udp2raw in this repo. Nevertheless,if you used udp2raw + any UDP-based VPN together,you can tunnel any traffic(include TCP/UDP/ICMP),currently OpenVPN/L2TP/ShadowVPN and tinyfecVPN are confirmed to be supported. When used alone,udp2raw tunnels only UDP traffic. A Tunnel which turns UDP Traffic into Encrypted FakeTCP/UDP/ICMP Traffic by using Raw Socket, helps you Bypass UDP FireWalls(or Unstable UDP Environment).
0 kommentar(er)
