DanielLavrushin/b4 v1.17.1

on GitHub

[1.17.1] - 2025-11-23

• ADDED: Out-of-Band (OOB) data handling with configurable position, reverse order, and character (--frag=oob).
• ADDED: Out-of-Band (OOB) strategies to B4Discovery.
• ADDED: TLS Record Splitting fragmentation strategy (--frag=tls) - splits ClientHello into multiple TLS records to bypass DPI expecting single-record handshakes.
• ADDED: SACK dropping (--tcp-drop-sack) - strips Selective Acknowledgment options from TCP headers to force full retransmissions and confuse stateful DPI tracking.
• UPDATED: Fake SNI payload now uses TLS 1.3 ClientHello structure with staticcdn.duckduckgo.com.
• IMPROVED: SNI fragmentation for long domains (>30 bytes). Now splits 12 bytes before SNI end instead of middle, ensuring domain suffixes like googlevideo.com are properly fragmented across packets.
• IMPROVED: Matcher performance with LRU caching for large geosite/geoip categories (70-90% CPU reduction for sets with big data inside).
• IMPROVED: Geodat download workflow - files now immediately available in sets manager without restart, config auto-reloads after download.
• IMPROVED: Set Fragmentation tab refactored.
• FIXED: Logs level can be switched witout reloading the app.
• FIXED: Config validation bug where Main Set was compared against itself, causing startup failure with TCP ConnBytesLimit greater than main set error.
• FIXED: update default fake SNI payload to use new format.
• CHANGED: Renamed --frag-sni-reverse to --frag-reverse and update related configurations.

Full Changelog: v1.17.0...v1.17.1