bepass-org / bepass Goto Github PK

If config.json be available in the current directory, the custom configuration (custom-config.json) file will not be executed with the -c , and only the main configuration (config.json) will be executed.

./bepass -c custom-config.json

hi
i can not build with go 1.20 on windows

   go build .
no Go files in C:\Users\parsibox\OneDrive\Desktop\bepass-main

  go run . -c config.json
no Go files in C:\Users\parsibox\OneDrive\Desktop\bepass-main

add global dns resolver to system and automatically set the system proxy for ease of use(for desktop version)

Thank you for your efforts!!

It also allows you to deploy a free and fast VLESS-like proxy on Cloudflare Workers. Just copy the worker.js to your worker

Where can I find this worker file?

I have some DNS encrypt tools that listenning on 127.0.0.1:53. Please support resolve DNS queries throught that local address.

The ability to define routing for different ip ranges, cloud providers, geo locations and domains to use suitable exit strategy

exit strategies couldbe something like this:

1. directly through the worker
2. through fragmenter
3. through fragmenter + worker
4. bypass(straight connections)
5. blackhole(drop)

ببخشید من فایل .bat رو ران میکنم یا حتی دستی و cmd میزنم این اررور رو میده: The image file....\bepass.exe is valid, but is for a machine type other than current machine.

could you please add Clash Meta core support? I'm using OpenClash on OpenWRT

Any connection simply gets closed, yielding no errors or warnings.

Using the default configuration or a custom DoH server does not seem to have any effects.

Based on the (rather) short conversation that you had on twitter, It seems like bepass does not check for the "use worker" value, tries to validate a nonexistent worker address, and fails.

This also shows that logs need to be a bit more expressive. 🤔

provide a config that allows unsafe connection through ssl/tls

با عرض درود و خداقوت خدمت شما دوست عزیز
بابت زحمات بی دریقتان از شما سپاسگزارم
پلاگینی که ساخته اید را بر روی سیم کارت همراه اول و ایرانسل امتحان کردم، بعضی از سایت ها را مثل گوگل و کلودفلر و یوتیوب، نمایش نمی دهد و پیغام خطای شناسایی نشدن از سوی dns را می دهد.
از طریق ساخت dns worker در کلودفلر و فعال کردن آن در پلاگین نیز به همین نتیجه رسیدم، به نظر شما مشکل چیست؟

failes on some sites with Can not connect: tls: first record does not look like a TLS handshake error

I'm trying to use a SDNS stamp from dnscrypt-proxy serverlist, needless to say, it probably is valid

But in the logs:

socksLogger2023/08/09 20:45:06 2023-08-09 20:45:06 [E]: server: illegal base64 data at input byte 123

Using termux and proot to run linux armv7 build

سلام وقتتون بخیر.
من یه برنامه‌نویس و شبکه کارم، هر ازگاهی میشینم فیلترینگ ایران رو تحلیل میکنم، دلم خواست که به پروژه شما کمک کنم ولی دقیق نمیدونم todo لیست شما چیه. ممنون میشم قرارش بدید

It would be nice to have a separate workflow that simply flags broken formatting and common mistakes with a linter.
It's enough to just run on linux-amd64.

Using gofumpt for formatting.
Using go vet for basic checks.
Using staticcheck to catch more mistakes.

p.s. run these tools locally on the main branch and you'll find plenty of things to fix :D

Hi, thanks for your great tool :)
Please add a feature than we can define offline DNS records like hosts file in linux (via json config file)

سلام خسته نباشید bepass روی ipv4 کار می کنه و از لحاظ سرعت خیلی خوبه اما با ipv6 خطای
failed to connect to :443: dial tcp :443: connect: connection refused
داد و این ایپی روی vless cdn کار می کرد و مشکل دیگه مثل cdn از ساعت 5 به بعد نوسانش زیاد میشه و مخصوصا شب ها استفادش سخت تر میشه

(نارنجی bepass مشکی vless cdn)
ولی وقتی من از سایت های معروف روی کلودفلر http ping می گیرم هیچ مشکلی نداره اما بقیه سایت ها دقیقا مثل vpn ها نوسان دارند (با ایرانسل رایتل و اسیاتک تست کردم) من دانش کافی رو در این موارد ندارم ولی فک میکنم بجای اینکه ایپی فیلتر کنن sni های مهم رو whitelist کردن و روی بقیه کانکشن ها اختلال انداختن سوال من اینه که میشه بجای مخفی کردن sni دامنه ای رو انتخاب کنیم که اولش ادرس سایت معروف پشت کلودفلره (مثلا discord.com5ma.workers.dev )و فرگمنت رو طوری تنظیم کنیم که اول ادرس رو به isp نشون بده و اونها فکر کنن که ما به ادرس تمیز وصل شدیم؟

i will update this issue later, if you know effective bypassing strategies please let me know

can you please create a docker-file??

hi . i used the ProxyIP function . but it dosnt work properly for me. need to refresh page so many time to open. how can i fix this ?

i have a vless worker . it uses ProxyIP too . and no need to having a VPS !

please take a look at this

https://lucyhuafang.blogspot.com/2023/11/wokerscfipvlessws.html
https://github.com/zizifn/edgetunnel/blob/main/src/worker-vless.js

for example:

let proxyIP = 'cdn.xn--b6gac.eu.org';

by setting that all websites behind CF are working properly.

can you add this feature ? it can help us so much.

thanks

Doing a local release build, I got a 12M binary. I decided to test compilation without using the cobra and viper dependencies and it came down to 7.7M. I don't know if smaller binaries are important for this project, but since the cli only has a single flag, maybe it's possible to drop that dependency?

I can suggest lighter alternatives:
github.com/peterbourgon/ff/v3
github.com/peterbourgon/ff/v3/ffcli

I've changed the config.json DNS but it's still using 8.8.4.4 server requests?

time="2024-01-13 09:48:01" level=INFO msg="skipping resolution for 8.8.4.4:443"
time="2024-01-13 09:48:02" level=INFO msg="Can not connect: websocket: bad handshake\n"
time="2024-01-13 09:48:02" level=ERROR msg="server: websocket: bad handshake"
time="2024-01-13 09:48:02" level=ERROR msg="server: Get \"https://8.8.4.4/dns-query?dns=AAABAAABAAAAAAAABnN0YXRpYwNhZHMFYnJhdmUDY29tAAABAAE\": tls: first record does not look like a TLS handshake"
time="2024-01-13 09:48:02" level=INFO msg="Can not connect: websocket: bad handshake\n"

time="2024-01-13 09:48:43" level=INFO msg="skipping resolution for 8.8.4.4:443"
time="2024-01-13 09:48:44" level=INFO msg="Can not connect: websocket: bad handshake\n"
time="2024-01-13 09:48:44" level=ERROR msg="server: websocket: bad handshake"
2024/01/13 09:48:44 [002] INFO: error read response ipv6.msftconnecttest.com : EOF
time="2024-01-13 09:48:44" level=ERROR msg="server: Get \"https://8.8.4.4/dns-query?dns=AAABAAABAAAAAAAABGlwdjYPbXNmdGNvbm5lY3R0ZXN0A2NvbQAAAQAB\": tls: first record does not look like a TLS handshake"
time="2024-01-13 09:48:44" level=INFO msg="Can not connect: websocket: bad handshake\n"

https://eth.link/dns-query
https://resolver.unstoppable.io/dns-query
https://eth.resolver.cloudflare-eth.com/dns-query

CIRA https://private.canadianshield.cira.ca/dns-query
Cloudflare https://mozilla.cloudflare-dns.com/dns-query
Comcast https://doh.xfinity.com/dns-query
Control https://freedns.controld.com/p0
NextDNS https://firefox.dns.nextdns.io
Shaw https://dns.shaw.ca/dns-query

add tun2socks for desktop os for ease of use

سلام
پیغام خطا میده هنگام اجرا کانفیگ پیش فرض هست اینترنت ثابت شاتل

Hello and thanks for your work.
If it's OK please add clash of clans too
It's banned in Iran

سلام و تشکر بابت زحمتی که میکشی
1- توضیحی که تو ReadMe درباره پروژه نوشتی یکم گیج کننده اس ، ممکنه خواننده فکر کنه پروژه چیز بیشتری از یه DNS روی ورکر نیست درحالی که خروجی یه فیلترشکن کامله
2- آیتم هایی که داخل فایل json باید ادیت بشه یا موجود هست با آیتم هایی که از طریق plugin دیده میشن متفاوت هستن که گیج کننده اس
3- وقتی با خود plugin کانفیگ میسازی ، 127.0.0.1:1080 توی description نشون میده که ظاهرا 1080 پورت socks خروجی هست ولی درعمل پورت واقعی همونی هست که داخل تنظیمات نکوباکس ست شده و 1080 الزاما درست نیست

The included Makefile is used to build the standard cli app and the gui version. The cli app can be compiled statically by setting CGO_ENABLED=0. This improves compatibility of the result binary.
The commands for both build and release targets can be modified like:
CGO_ENABLED=0 go build -o $(BUILD_DIR)/bepass cmd/cli/main.go

The GUI needs cgo, so this can't be applied to it.

Allow to config multiple dns links and find the best one based on its speed and ping