Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fake sni in cloudflare #408

Open
hamedbaftam opened this issue Oct 13, 2024 · 4 comments
Open

Fake sni in cloudflare #408

hamedbaftam opened this issue Oct 13, 2024 · 4 comments

Comments

@hamedbaftam
Copy link

hamedbaftam commented Oct 13, 2024

vless://[redacted]

please consider this config [redacted] not have any dns record!

@wkrp
Copy link
Member

wkrp commented Oct 13, 2024

This is not the place for posting bridge information, please. This forum is for research and development discussions.

@wkrp wkrp closed this as completed Oct 13, 2024
@its0ka
Copy link

its0ka commented Nov 9, 2024

@wkrp you misunderstood the meaning of the post. it's valid and shouldn't be closed. and the domain doesn't have a dns record probably because its used in cf workers, where dns records are not required, or the domain name servers have changed from cloudflare to something else, while still having dns records on cloudflare. so unfortunately it's probably not a fake sni on cloudflare

@wkrp
Copy link
Member

wkrp commented Nov 11, 2024

@its0ka thank you for the additional context. The original post had a VLESS UUID, IP address, and sni=XXXX.cfd. Apparently, despite appearing in the bridge URL sni parameter, XXXX.cfd did not have a DNS record. (TIL there is a .cfd TLD, "clothing fashion design".)

So what is the point? That it's possible to configure DNS records in Cloudflare DNS and use them in sni, even if the Cloudflare resolvers are not the ones actually used globally to resolve the domain? Is this a way to make SNI more flexible for VLESS bridges hosted on Cloudflare? Is it possible to use any string for the sni parameter when using Cloudflare? Does it only work with Cloudflare workers? I'm missing the bigger picture.

@wkrp wkrp reopened this Nov 11, 2024
@mmmray
Copy link

mmmray commented Nov 11, 2024

this is mostly a trick to not have to pay for the domain but still be able to use it after expiry. i don't think this is very interesting for anticensorship and it should not be encouraged to leak other people's configs on this forum just on the chance there's something interesting in them.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants