green-tunnel 2.0.2 → 3.0.2

package/dist/ui.js

@@ -0,0 +1,89 @@
+import process from 'node:process';
+const BRAND = [132, 198, 111];
+const ESC = '\u001B[';
+const RESET = `${ESC}0m`;
+// `isTTY` is typed as `boolean` but is genuinely `undefined` when stdout is a
+// pipe — falsy either way, which is what we want.
+const colorEnabled = process.stdout.isTTY && process.env['NO_COLOR'] === undefined && process.env['TERM'] !== 'dumb';
+function paint(code, text) {
+    return colorEnabled ? `${ESC}${code}m${text}${RESET}` : text;
+}
+const [R, G, B] = BRAND;
+/** A run of brand-coloured background — the pixels the logo is drawn with. */
+function block(width) {
+    if (!colorEnabled)
+        return '#'.repeat(width);
+    return paint(`48;2;${String(R)};${String(G)};${String(B)}`, ' '.repeat(width));
+}
+const brand = (text) => paint(`38;2;${String(R)};${String(G)};${String(B)}`, text);
+const bold = (text) => paint('1', text);
+const dim = (text) => paint('2', text);
+const red = (text) => paint('31', text);
+const PAD = '  ';
+export function printBanner() {
+    const lines = [
+        `${PAD}    ${block(4)}`,
+        `${PAD} ${block(10)}`,
+        `${PAD}${block(12)}`,
+        `${PAD}${block(5)}  ${block(5)}`,
+        `${PAD}${block(3)}      ${block(3)}`,
+        `${PAD}${block(1)}          ${block(1)}`,
+    ];
+    console.log(`\n${lines.join('\n')}\n`);
+    console.log(`${PAD}${brand(bold('Green'))} ${bold('Tunnel')}\n`);
+}
+export function printStatus(address, settings, systemProxy) {
+    const endpoint = `${address.host}:${String(address.port)}`;
+    const fragmentation = settings.fragment.enabled
+        ? `${settings.fragment.tlsRecords ? 'TLS records' : 'TCP segments'} of ${String(settings.fragment.size)}B`
+        : 'off';
+    console.log(`${PAD}${brand('●')} running on ${bold(endpoint)}`);
+    console.log(`${PAD}${dim(`fragmentation  ${fragmentation}`)}`);
+    console.log(`${PAD}${dim(`dns            ${describeDns(settings)}`)}`);
+    console.log(`${PAD}${dim(`system proxy   ${systemProxy ? 'managed by GreenTunnel' : 'untouched'}`)}`);
+    if (!systemProxy) {
+        console.log(`\n${PAD}${dim('Point your client at it, or export:')}`);
+        console.log(`${PAD}${dim(`export http_proxy=http://${endpoint} https_proxy=http://${endpoint}`)}`);
+    }
+    console.log(`\n${PAD}${dim('GreenTunnel does not hide your IP address.')}`);
+    console.log(`${PAD}${dim('Press Ctrl+C to stop.')}\n`);
+}
+function describeDns(settings) {
+    switch (settings.dns.mode) {
+        case 'doh':
+            return `DoH via ${new URL(settings.dns.dohUrl).host}`;
+        case 'dot':
+            return `DoT via ${settings.dns.dotHost}:${String(settings.dns.dotPort)}`;
+        case 'plain':
+            return settings.dns.plainServers.length > 0
+                ? `plain via ${settings.dns.plainServers.join(', ')}`
+                : 'plain via system resolvers';
+    }
+}
+/**
+ * Acknowledge the stop request before teardown starts.
+ *
+ * Restoring the system proxy means several `networksetup`/`gsettings` calls,
+ * which take long enough that a silent CLI looks wedged — and the user's next
+ * move is a second Ctrl-C, the one thing that can strand their network
+ * settings. So say what is happening, and say it is worth waiting for.
+ */
+export function printStopping(restoresSystemProxy) {
+    // Ctrl+C echoes `^C` with no trailing newline, so open on a fresh line.
+    console.error(`\n${PAD}${brand('◆')} ${bold('Stopping GreenTunnel…')}`);
+    console.error(`${PAD}${dim(restoresSystemProxy
+        ? "Restoring your system proxy settings — please don't force-quit."
+        : 'Closing connections — one moment.')}`);
+}
+/** Confirm teardown finished, so the user knows the machine is clean. */
+export function printStopped(restoredSystemProxy) {
+    const detail = restoredSystemProxy ? ' Your network settings are back to how they were.' : '';
+    console.error(`${PAD}${brand('✔')} Stopped.${detail}\n`);
+}
+export function printError(message) {
+    console.error(`${PAD}${red('✖')} ${message}`);
+}
+export function printNotice(message) {
+    console.error(`${PAD}${dim(message)}`);
+}
+//# sourceMappingURL=ui.js.map

package/dist/ui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.js","sourceRoot":"","sources":["../src/ui.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AAGnC,MAAM,KAAK,GAAsC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAEjE,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC;AAEzB,8EAA8E;AAC9E,kDAAkD;AAClD,MAAM,YAAY,GAChB,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC;AAElG,SAAS,KAAK,CAAC,IAAY,EAAE,IAAY;IACvC,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AAExB,8EAA8E;AAC9E,SAAS,KAAK,CAAC,KAAa;IAC1B,IAAI,CAAC,YAAY;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,QAAQ,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,KAAK,CAAC,QAAQ,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AACnG,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACvD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAExD,MAAM,GAAG,GAAG,IAAI,CAAC;AAEjB,MAAM,UAAU,WAAW;IACzB,MAAM,KAAK,GAAG;QACZ,GAAG,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE;QACvB,GAAG,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,EAAE;QACrB,GAAG,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE;QACpB,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE;QAChC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,EAAE;QACpC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,EAAE;KACzC,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,OAAqB,EACrB,QAAuB,EACvB,WAAoB;IAEpB,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3D,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO;QAC7C,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG;QAC1G,CAAC,CAAC,KAAK,CAAC;IAEV,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,kBAAkB,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,kBAAkB,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CACT,GAAG,GAAG,GAAG,GAAG,CAAC,kBAAkB,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CACzF,CAAC;IAEF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,GAAG,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CACT,GAAG,GAAG,GAAG,GAAG,CAAC,4BAA4B,QAAQ,uBAAuB,QAAQ,EAAE,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,GAAG,CAAC,4CAA4C,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,QAAuB;IAC1C,QAAQ,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,KAAK,KAAK;YACR,OAAO,WAAW,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,KAAK,KAAK;YACR,OAAO,WAAW,QAAQ,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3E,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBACzC,CAAC,CAAC,aAAa,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACrD,CAAC,CAAC,4BAA4B,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,mBAA4B;IACxD,wEAAwE;IACxE,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,KAAK,CACX,GAAG,GAAG,GAAG,GAAG,CACV,mBAAmB;QACjB,CAAC,CAAC,iEAAiE;QACnE,CAAC,CAAC,mCAAmC,CACxC,EAAE,CACJ,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,mBAA4B;IACvD,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,MAAM,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,3 @@
+/** Read from the manifest next to `dist/` so there is one source of truth. */
+export declare const VERSION: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAMA,8EAA8E;AAC9E,eAAO,MAAM,OAAO,EAAE,MAA8B,CAAC"}

package/dist/version.js

@@ -0,0 +1,13 @@
+import { readFileSync } from 'node:fs';
+/** Read from the manifest next to `dist/` so there is one source of truth. */
+export const VERSION = readManifestVersion();
+function readManifestVersion() {
+    try {
+        const raw = readFileSync(new URL('../package.json', import.meta.url), 'utf8');
+        return JSON.parse(raw).version ?? '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+}
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAMvC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,OAAO,GAAW,mBAAmB,EAAE,CAAC;AAErD,SAAS,mBAAmB;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9E,OAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC,OAAO,IAAI,OAAO,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,11 +1,15 @@
 {
   "name": "green-tunnel",
-  "version": "2.0.2",
-  "description": "",
+  "version": "3.0.2",
+  "description": "Bypass DPI censorship — the engine and the command line tool",
   "keywords": [
-    "HTTPS",
-    "SNI",
-    "VPN"
+    "dpi",
+    "censorship",
+    "sni",
+    "tls",
+    "proxy",
+    "doh",
+    "dot"
   ],
   "homepage": "https://github.com/SadeghHayeri/GreenTunnel#readme",
   "bugs": {
@@ -13,43 +17,40 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/SadeghHayeri/GreenTunnel.git"
+    "url": "git+https://github.com/SadeghHayeri/GreenTunnel.git",
+    "directory": "packages/cli"
   },
   "license": "MIT",
   "author": "Sadegh Hayeri",
-  "files": [
-    "bin",
-    "src"
-  ],
   "type": "module",
-  "main": "src/index.js",
-  "exports": {
-    ".": "./src/index.js"
+  "engines": {
+    "node": ">=24.0.0"
   },
   "bin": {
-    "green-tunnel": "bin/gt.js",
-    "gt": "bin/gt.js"
+    "gt": "./dist/main.js",
+    "green-tunnel": "./dist/main.js"
   },
-  "engines": {
-    "node": ">=20.0.0"
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
   },
+  "files": [
+    "dist"
+  ],
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "build": "tsc --build tsconfig.build.json",
+    "dev": "tsc --build tsconfig.build.json && node dist/main.js",
+    "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "dependencies": {
-    "chalk": "^5.6.2",
-    "clear": "^0.1.0",
-    "debug": "^4.4.0",
-    "dns-over-tls": "^0.0.9",
-    "dns-socket": "^4.2.2",
-    "lru-cache": "^11.2.6",
-    "ora": "^9.3.0",
-    "validator": "^13.15.26",
-    "winreg": "^1.2.5",
-    "yargs": "^18.0.0"
+    "dns-packet": "^5.6.1",
+    "lru-cache": "^11.5.2"
   },
   "devDependencies": {
-    "eslint": "^9.39.3",
-    "eslint-config-xo": "^0.49.0"
+    "@types/dns-packet": "^5.6.5"
   }
 }

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2019 Sadegh Hayeri
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/README.md

@@ -1,172 +0,0 @@
-# Green Tunnel
-
-<p align="center">
-    <img src="assets/logo.png" alt="green tunnel logo" width="200">
-</p>
-<p align="center">
-    <img src="https://img.shields.io/github/license/SadeghHayeri/GreenTunnel.svg?color=Green&style=for-the-badge">
-    <img src="https://img.shields.io/npm/v/green-tunnel?color=Green&style=for-the-badge">
-    <img src="https://img.shields.io/github/repo-size/SadeghHayeri/GreenTunnel.svg?color=Green&style=for-the-badge">
-</p>
-
-GreenTunnel bypasses DPI (Deep Packet Inspection) systems found in many ISPs (Internet Service Providers) which block access to certain websites.
-
-> **Note:** GreenTunnel does not hide your IP address. It only bypasses DPI-based censorship.
-
----
-
-<table>
-<tr>
-<td width="340"><img src="assets/new-version.png" alt="GreenTunnel v2.0.0 new UI" width="320"></td>
-<td valign="top" style="padding-left: 24px;">
-
-**GreenTunnel v2 — with the help of [Claude Code](https://code.claude.com/docs/en/overview) — is out now.**
-
-After years of silence, this project is alive again. The entire codebase has been rebuilt from the ground up: native ESM, Node.js 20+, a brand new dark UI, and a clean dependency tree with zero known vulnerabilities.
-
-Open-source tools that help people reach the free internet shouldn't die — and with AI-assisted development, they don't have to. We'll keep doing our best to help people access the open internet, one packet at a time.
-
-</td>
-</tr>
-</table>
-
-<p align="center">
-    <img src="assets/demo.gif" alt="green tunnel demo">
-</p>
-
----
-
-## Installation
-
-### Requirements
-
-- **Node.js 20+**
-
-### npm (recommended)
-
-```bash
-npm install -g green-tunnel
-```
-
-After installation, run with `gt` or `green-tunnel`.
-
-### Docker
-
-```bash
-docker run -p 8000:8000 sadeghhayeri/greentunnel
-```
-
----
-
-## Usage
-
-### CLI
-
-```
-Usage: green-tunnel [options]
-Usage: gt [options]
-
-Options:
-  --ip                   IP address to bind proxy server     [string]  [default: "127.0.0.1"]
-  --port                 Port to bind proxy server           [number]  [default: 8000]
-  --https-only           Block insecure HTTP requests        [boolean] [default: false]
-  --dns-type             DNS resolver type                   [string]  [choices: "https", "tls", "unencrypted"] [default: "https"]
-  --dns-server           DNS server URL                      [string]  [default: "https://cloudflare-dns.com/dns-query"]
-  --dns-ip               IP for unencrypted DNS              [string]  [default: "127.0.0.1"]
-  --dns-port             Port for unencrypted DNS            [number]  [default: 53]
-  --tls-record-frag...   Enable TLS record fragmentation     [boolean] [default: false]
-  --silent, -s           Run in silent mode                  [boolean] [default: false]
-  --verbose, -v          Debug mode (e.g. 'green-tunnel:*')  [string]
-  --system-proxy         Auto-set system proxy               [boolean] [default: true]
-  --help, -h             Show help
-  --version, -V          Show version number
-```
-
-**Examples:**
-
-```bash
-# Basic usage (auto-sets system proxy)
-gt
-
-# Custom port
-gt --port 9000
-
-# Use a different DoH server
-gt --dns-server https://doh.securedns.eu/dns-query
-
-# Enable TLS record fragmentation (for stricter DPI)
-gt --tls-record-fragmentation
-
-# Debug mode
-gt --verbose 'green-tunnel:*'
-```
-
-### Docker
-
-```bash
-# Basic
-docker run -p 8000:8000 sadeghhayeri/greentunnel
-
-# Custom port
-docker run -e PORT=9000 -p 9000:9000 sadeghhayeri/greentunnel
-
-# Run in background, restart on reboot
-docker run -d --restart unless-stopped -p 8000:8000 sadeghhayeri/greentunnel
-```
-
-**Environment variables:**
-
-| Variable | Description | Default |
-|---|---|---|
-| `PORT` | Proxy port | `8000` |
-| `HTTPS_ONLY` | Block HTTP traffic | `false` |
-| `DNS_TYPE` | `https`, `tls`, or `unencrypted` | `https` |
-| `DNS_SERVER` | DNS server URL | Cloudflare DoH |
-| `SILENT` | Suppress output | `false` |
-| `VERBOSE` | Debug namespace | — |
-
-### Graphical Interface (GUI)
-
-Download the pre-built installer for your OS from the [releases](https://github.com/SadeghHayeri/GreenTunnel/releases) page.
-
----
-
-## How It Works
-
-### HTTP
-
-Some DPI systems fail to detect blocked content when an HTTP request is split across multiple TCP segments. GreenTunnel splits the request so the `Host` header straddles a segment boundary, preventing the DPI from matching the blocked hostname.
-
-### HTTPS / SNI Fragmentation
-
-TLS's Server Name Indication (SNI) extension sends the target hostname in plaintext during the handshake. DPI systems use this to block HTTPS connections. GreenTunnel splits the initial `ClientHello` TLS record into small fragments so the DPI cannot reassemble and inspect the SNI field.
-
-Optionally, `--tls-record-fragmentation` breaks the TLS record at a lower level for stricter DPI environments.
-
-### Encrypted DNS
-
-Standard DNS lookups can be intercepted or spoofed by ISPs to block domains at the DNS level. GreenTunnel uses **DNS over HTTPS (DoH)** or **DNS over TLS (DoT)** to get the real IP address, bypassing DNS-based blocking.
-
----
-
-## Contributing
-
-Pull requests and issues are always welcome.
-
-- Use `FIX:`, `ADD:`, `UPDATE:` prefixes in PR titles.
-- Keep commits focused and descriptive.
-- Make sure `npm install` passes and `node -e "import('./src/index.js')"` works.
-
----
-
-## Donation
-
-> Love GreenTunnel? Please consider donating to sustain development.
-
-**Ethereum / USDT (ERC-20):** `0xB116a6AE50c38a455944A65f9cEE4D54CEceF080`
-
----
-
-## License
-
-Licensed under the [MIT License](https://github.com/SadeghHayeri/GreenTunnel/blob/main/LICENSE).

package/bin/gt.js

@@ -1,170 +0,0 @@
-#!/usr/bin/env node
-
-import chalk from 'chalk';
-import clear from 'clear';
-import ora from 'ora';
-import debug from 'debug';
-import yargs from 'yargs';
-import { hideBin } from 'yargs/helpers';
-import { Proxy, config, getLogger } from '../src/index.js';
-
-const logger = getLogger('cli');
-
-const argv = yargs(hideBin(process.argv))
-	.usage('Usage: green-tunnel [options]')
-	.usage('Usage: gt [options]')
-	.alias('help', 'h')
-	.alias('version', 'V')
-
-	.option('ip', {
-		type: 'string',
-		describe: 'ip address to bind proxy server',
-		default: '127.0.0.1',
-	})
-
-	.option('port', {
-		type: 'number',
-		describe: 'port address to bind proxy server',
-		default: config.port,
-	})
-
-	.option('https-only', {
-		type: 'boolean',
-		describe: 'Block insecure HTTP requests',
-		default: config.httpsOnly,
-	})
-
-	.option('dns-type', {
-		type: 'string',
-		choices: ['https', 'tls', 'unencrypted'],
-		default: config.dns.type,
-	})
-
-	.option('dns-server', {
-		type: 'string',
-		default: config.dns.server,
-	})
-
-	.option('dns-ip', {
-		type: 'string',
-		default: config.dns.ip,
-	})
-
-	.option('dns-port', {
-		type: 'number',
-		default: config.dns.port,
-	})
-
-	.option('silent', {
-		alias: 's',
-		type: 'boolean',
-		describe: 'run in silent mode',
-		default: false,
-	})
-
-	.option('verbose', {
-		alias: 'v',
-		type: 'string',
-		describe: 'debug mode',
-		default: '',
-	})
-
-	.option('system-proxy', {
-		type: 'boolean',
-		describe: 'automatic set system-proxy',
-		default: true,
-	})
-
-	.option('tls-record-fragmentation', {
-		type: 'boolean',
-		describe: 'enable TLS record fragmentation',
-		default: false
-	})
-
-	.example('$0')
-	.example('$0 --ip 127.0.0.1 --port 8000')
-	.example('$0 --dns-server https://doh.securedns.eu/dns-query')
-	.epilog('ISSUES:  https://github.com/SadeghHayeri/GreenTunnel/issues\n' +
-		'DONATE:  https://github.com/SadeghHayeri/GreenTunnel#donation')
-	.parseSync();
-
-const MAIN_COLOR = '84C66F';
-
-function printBanner() {
-	console.log();
-	console.log('                          ' + chalk.bgHex(MAIN_COLOR)('    '));
-	console.log('                       ' + chalk.bgHex(MAIN_COLOR)('          '));
-	console.log('                      ' + chalk.bgHex(MAIN_COLOR)('            '));
-	console.log('                      ' + chalk.bgHex(MAIN_COLOR)('     ') + '  ' + chalk.bgHex(MAIN_COLOR)('     '));
-	console.log('                      ' + chalk.bgHex(MAIN_COLOR)('   ') + '      ' + chalk.bgHex(MAIN_COLOR)('   '));
-	console.log('                      ' + chalk.bgHex(MAIN_COLOR)(' ') + '          ' + chalk.bgHex(MAIN_COLOR)(' '));
-	console.log();
-	console.log('                      ' + chalk.hex(MAIN_COLOR).bold('Green') + ' ' + chalk.bold.white('Tunnel'));
-}
-
-function printAlert(proxy) {
-	console.log('\n');
-	console.log('    ' + chalk.bgHex(MAIN_COLOR).black(' Note: GreenTunnel does not hide your IP address '));
-	console.log('      ' + chalk.hex(MAIN_COLOR)(' https://github.com/SadeghHayeri/GreenTunnel '));
-	console.log('\n      ' + chalk.white(` GreenTunnel is running at ${proxy.server.address().address}:${proxy.server.address().port}. `));
-}
-
-function showSpinner() {
-	console.log('');
-	ora({
-		indent: 27,
-		text: '',
-		color: 'green'
-	}).start();
-}
-
-async function main() {
-	if (argv['verbose']) {
-		debug.enable(argv['verbose']);
-	}
-
-	const proxy = new Proxy({
-		ip: argv['ip'],
-		port: parseInt(argv['port'], 10),
-		httpsOnly: argv['https-only'],
-		dns: {
-			type: argv['dns-type'],
-			server: argv['dns-server'],
-			ip: argv['dns-ip'],
-			port: argv['dns-port']
-		},
-		source: 'CLI',
-		'tlsRecordFragmentation': argv['tls-record-fragmentation']
-	});
-
-	const exitTrap = async () => {
-		logger.debug('Caught interrupt signal');
-		await proxy.stop();
-		logger.debug('Successfully Closed!');
-
-		if (!argv['silent']) {
-			clear();
-		}
-
-		process.exit(0);
-	};
-
-	const errorTrap = error => {
-		logger.error(error);
-	};
-
-	process.on('SIGINT', exitTrap);
-	process.on('unhandledRejection', errorTrap);
-	process.on('uncaughtException', errorTrap);
-
-	await proxy.start({ setProxy: argv['system-proxy'] });
-
-	if (!argv['silent'] && !argv['verbose']) {
-		clear();
-		printBanner();
-		printAlert(proxy);
-		showSpinner();
-	}
-}
-
-main().catch(logger.error);

package/src/config.js

@@ -1,15 +0,0 @@
-const config = {
-	ip: '127.0.0.1',
-	port: 8000,
-	httpsOnly: false,
-	clientHelloMTU: 100,
-	dns: {
-		type: 'https', // 'tls' or 'https' or 'unencrypted'
-		server: 'https://cloudflare-dns.com/dns-query',
-		ip: '127.0.0.1',
-		port: 53,
-		cacheSize: 1000,
-	}
-};
-
-export default config;

package/src/dns/base.js

@@ -1,47 +0,0 @@
-import { LRUCache } from 'lru-cache';
-import validator from 'validator';
-const { isIP } = validator;
-import getLogger from '../logger.js';
-import config from '../config.js';
-
-const logger = getLogger('dns');
-
-function _isIP(v) {
-	return v && isIP(v);
-}
-
-export default class BaseDNS {
-	constructor() {
-		this.cache = new LRUCache({max: config.dns.cacheSize});
-	}
-
-	async lookup(hostname) {
-		try {
-			let ip = this.cache.get(hostname);
-			if (ip) {
-				return ip;
-			}
-
-			const t = new Date();
-
-			ip = hostname;
-			for (let depth = 0; !_isIP(ip) && depth < 5; depth++) {
-				ip = await this._lookup(ip).catch(error => {
-					logger.debug(error);
-					return ip;
-				});
-			}
-
-			if (!_isIP(ip)) {
-				throw new Error(`BAD IP FORMAT (${ip})`);
-			}
-
-			logger.debug(`[DNS] ${hostname} -> ${ip} (${new Date() - t} ms)`);
-			this.cache.set(hostname, ip);
-			return ip;
-		} catch (error) {
-			logger.debug(`[DNS] cannot resolve hostname ${hostname} (${error})`);
-		}
-	}
-}
-

package/src/dns/https.js

@@ -1,30 +0,0 @@
-import BaseDNS from './base.js';
-
-export default class DNSOverHTTPS extends BaseDNS {
-	constructor(dnsServer) {
-		super();
-		this.dnsServer = dnsServer;
-	}
-
-	async _lookup(hostname) {
-		const url = new URL(this.dnsServer);
-		url.searchParams.set('name', hostname);
-		url.searchParams.set('type', 'A');
-
-		const response = await fetch(url.toString(), {
-			headers: {Accept: 'application/dns-json'},
-		});
-
-		if (!response.ok) {
-			throw new Error(`DoH request failed: ${response.status}`);
-		}
-
-		const result = await response.json();
-
-		if (!result.Answer || result.Answer.length === 0) {
-			throw new Error(`No DNS answers for ${hostname}`);
-		}
-
-		return result.Answer[0].data;
-	}
-}