Comment by ignoramous
7 months ago
You could straight up connect to the destination (over TCP) from Cloudflare without needing relays; a project I wrote demonstrates TCP over HTTP (for Deno Deploy) and TCP over WebSockets (for Workers): https://github.com/serverless-proxy/serverless-proxy
Proxying projects utilising HTTP/TLS are popular in the anti-censorship community (discussion board: https://github.com/net4people/bbs) and there are many variants of it; ex:
- KCP (over UDP): https://github.com/xtaci/kcp-go
Yeah, but websockets are limited. I wrote this to tunnel VPNs over this and have full IP connectivity... which does work. A lot of users of the application I have talked with are from China and Iran. Seems to work well.
> ... from China and Iran. Seems to work well.
Apparently Cloudflare, since a few weeks ago, has started flagging traffic bound to/from proxies as DDoS vectors: https://github.com/net4people/bbs/issues/429