valnesfjord/tg-ws-proxy-rs v2.4.2

tg-ws-proxy-rs v2.4.2

on GitHub

Cloudflare connections can now use plaintext WebSocket transport when network
TLS interception prevents wss:// upgrades.

Changes

• Added --cf-disable-tls and TG_CF_DISABLE_TLS. When enabled, Cloudflare
  proxy and Worker connections use ws:// on port 80 instead of wss:// on
  port 443.
• Applied the same transport choice to connection-pool refills and --check,
  so background and diagnostic connections match live routing.
• Kept direct Telegram WebSocket connections on TLS regardless of this option.

What it costs

MTProto payloads retain their own transport encryption, but plaintext HTTP
exposes the Cloudflare hostname and traffic metadata. TLS remains the default;
use this option only where network interception makes it necessary.