40 Commits

Author	SHA1	Message	Date
Fancy Zhang	5da82723dd	wait at most 60s in case of xtables lock	2020-08-16 15:16:01 +08:00
Fancy Zhang	d6394f25f3	fix local packet loop	2020-07-21 14:05:42 +08:00
Fancy Zhang	0eca327785	logical organize tproxy iptables	2020-07-20 19:00:14 +08:00
Fancy Zhang	9d2c26e765	customize cgroup mount point	2020-07-05 22:29:43 +08:00
Fancy Zhang	4753d2be68	filter cgroup that not exist	2020-07-04 15:32:36 +08:00
Fancy Zhang	9f4c980c3e	minor adjustments	2020-07-04 14:37:28 +08:00
Fancy Zhang	0d2725d00c	expose table, fwmark, mark_newin to config	2020-06-28 00:12:38 +08:00
Fancy Zhang	a4628cfed8	use more uncommon route table and mark	2020-06-27 12:52:48 +08:00
springzfx	c32457a1aa	robust detect already in correspond cgroup	2020-05-27 00:02:56 +08:00
springzfx	4fea0d39a2	add iptables output prefix	2020-05-26 00:10:14 +08:00
fancy	a16cefbfb2	handle signal, robust iptables clean	2020-05-16 14:07:07 +08:00
fancy	1c16f57193	now based on unix socket and json config	2020-05-16 10:29:34 +08:00
fancy	138fa698be	update readme	2020-05-16 00:12:03 +08:00
fancy	b5701d8b49	allow array input for cgroup_proxy and cgroup_noproxy	2020-05-14 04:39:02 +08:00
fancy	f8e0abbb55	check root, and check iptables before clean	2020-05-13 23:42:05 +08:00
fancy	6c24c68831	only masquerade ipv6 private address	2020-05-08 11:47:51 +08:00
fancy	d3b2dc0465	small fix	2020-05-07 00:22:08 +08:00
fancy	7f0ebe9d35	remove mark_noproxy, and other small change	2020-05-04 20:41:50 +08:00
fancy	aa5ca6f204	update example, limit to localhost	2020-05-02 08:01:19 +08:00
fancy	f55b09ec12	imporved gateway nat, and bypass broadcast things	2020-05-01 11:26:46 +08:00
fancy	6ae12bf5c4	optimize	2020-04-30 16:32:07 +08:00
fancy	9f8d540c78	important optimize	2020-04-30 02:02:11 +08:00
fancy	b8204126c5	maintain update	2020-04-28 20:25:44 +08:00
fancy	836a34cdc8	also handle gateway dns	2020-04-28 13:49:26 +08:00
fancy	3c21882b88	more compact	2020-04-28 12:17:25 +08:00
fancy	71d924a303	more robust clean whem stop	2020-04-28 03:28:48 +08:00
fancy	5d0b137778	more robust ... do not handle local device connection through tproxy if gateway is not enabled	2020-04-28 02:37:36 +08:00
fancy	8a29e88bab	update clean iptables	2020-04-27 23:00:25 +08:00
fancy	dd234b08a0	typo fix	2020-04-27 21:50:09 +08:00
fancy	168779ea90	fix #1	2020-04-27 21:29:44 +08:00
fancy	6c77233e1e	little fix, and update readme	2020-04-27 14:43:40 +08:00
fancy	6be14b9935	new feature: add gateway support	2020-04-27 00:40:39 +08:00
fancy	c1cd7e6e07	clean stuff	2020-04-26 03:43:18 +08:00
fancy	a440046714	now alsoOC support all linux with both cgroup and cgroup2 enabled by default	2020-04-24 14:20:11 +08:00
fancy	945222a5cd	updated readme	2020-04-24 13:21:00 +08:00
fancy	6ed1be3c8a	change a lot, stable now	2020-04-24 00:47:25 +08:00
fancy	b614d006c1	some code adjustment	2020-04-23 12:27:10 +08:00
fancy	8141fca948	update readme	2020-04-22 16:49:35 +08:00
fancy	e8684c936f	fix two situation: active incomming connection and local doh(dns over https) query ... 1. return incoming connection directly, v2ray tproxy seems not work for this situation, maybe a v2ray bug 2. exclude lo to avoid local bind problem, for example if your dns is 127.0.0.1:53 for doh, then v2ray can't bind to reply back result	2020-04-22 14:40:31 +08:00
fancy	267aac32de	cgproxy is work now	2020-04-22 03:04:15 +08:00