Security News
Oracle Drags Its Feet in the JavaScript Trademark Dispute
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
Tunneling all sockets by using regular HTTP requests.
If you always suffered from the limitations of proxy or firewall that cannot be avoided, then this tool MIGHT be useful for you.
It is a pair of HTTP client/server programs. The client also acts as a server, capturing all incoming sockets and sending them to the server. The server then sends the received socket data to the target server.
All data between the client and server is encrypted and wrapped in HTTP requests.
HTTPS is supported, but your proxy may block self-signed server certificates. Even with a formal certificate, the proxy may still decrypt the SSL/TLS layer by using fake certificates, and the data is encrypted (again, by this tool) anyway.
HTTPS may be only necessary for WebSocket since it will connect by using the CONNECT method via proxy, which is probably not allowed other than HTTPS.
If there is still any concern, put the server behind a firewall or any reverse proxy that can handle SSL/TLS connections.
The connection WILL be slow, and may not be stable too.
Although the WebSocket method can do way better performance than others, it may not be suitable for all situations.
Since HTTP is stateless, it's better to use this tool with other "real" tunnel protocols, such as SSH, that maintain consistent connections, otherwise, it may consume a lot of sessions, which is not efficient and might be suspected.
pip install http-tunnel
To start server:
http-tunnel -s
To start client:
http-tunnel -c
Note: To use proxy, set the HTTP_PROXY
or HTTPS_PROXY
environment variable.
For more information:
http-tunnel --help
Use at your own risk and responsibility.
FAQs
HTTP tunneling tool.
We found that http-tunnel demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
Security News
The Linux Foundation is warning open source developers that compliance with global sanctions is mandatory, highlighting legal risks and restrictions on contributions.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.