dpibreak.git/src/platform, branch v0.4.1System-wide DPI circumvention with minimal configuration
http://git.dilluti0n.com/dpibreak.git/atom?h=v0.4.12026-02-15T13:36:06Zlinux: add PID file locking for single instance enforcement2026-02-15T13:36:06Zdilluti0nhskimse1@gmail.com2026-02-15T13:36:06Zurn:sha1:b26c2c8de5260b0e2a0b52cd838cb8a4bc1a63c1
Prevent multiple non-daemon dpibreak instances using flock(). Show
existing PID on conflict and maintain lock until process termination.
linux: extract PID_FILE constant for reuse2026-02-15T13:13:35Zdilluti0nhskimse1@gmail.com2026-02-15T13:05:13Zurn:sha1:f31938fd8eea3d05f9e62daee236cf7c56ade227Consolidate setup logic into run()2026-02-15T13:04:25Zdilluti0nhskimse1@gmail.com2026-02-15T13:01:43Zurn:sha1:3cb2c192454964c2ae01e196eaa7fdd6434efeb5
The bootstrap/run separation was unnecessary. Move all initialization
(cleanup + nftables setup): into run() and skip bootstrap in daemon
mode. We repurpose the bootstrap() function to only run in non-daemon
mode for future foreground-only initialization.
- Add OPT_DAEMON option to detect daemon mode
- Move cleanup() and install_rules() from bootstrap() to run()
- Make bootstrap() a no-op (only called in non-daemon mode)
opt: refactor to detach parse_args and set_opt2026-02-15T06:59:26Zdilluti0nhskimse1@gmail.com2026-02-15T02:56:34Zurn:sha1:40fc4485e56414ab379b2332a9994a23af16eb3fwindows: implement windows service2026-02-15T06:59:26Zdilluti0nhskimse1@gmail.com2026-02-15T02:33:21Zurn:sha1:ff79c7a48c60a5ea095d9faa3a2888fcd2283678
Revert lock_handle()
send_to_raw cannot get a mutex since lock is not released per
iteration.
commit e08b57d281d8368dc02f06e3b6cd43edf88b2438
linux: implement daemonize2026-02-15T06:59:16Zdilluti0nhskimse1@gmail.com2026-02-14T16:09:03Zurn:sha1:389f9bf2b021104072377420c0c6c115542da652
Closes: #2
Link: https://github.com/dilluti0n/dpibreak/issues/2
windows: extend WinDivert filter for --fake-autottl2026-01-23T06:55:09Zdilluti0nhskimse1@gmail.com2026-01-20T05:41:11Zurn:sha1:ec0cd64df8f834211673c0116586b0a3b2633b32
Build WinDivert filter at runtime:
- Default: outbound TLS ClientHello packets
- --fake-autottl: also capture inbound SYN/ACK from tcp sport 443
Keep !impostor to avoid recapture.
linux: iptables: implement SYN/ACK capture on --fake-autottl2026-01-23T06:55:09Zdilluti0nhskimse1@gmail.com2026-01-20T04:12:59Zurn:sha1:6780cc913016e0e567b20518a3577f966417b447
- Add mangle/INPUT jump to DPIBREAK
- Queue tcp sport 443 SYN/ACK packets (NFQUEUE --queue-bypass)
- Cleanup removes INPUT jump as well
linux: nftables: queue SYN/ACK on --fake-autottl2026-01-23T06:55:09Zdilluti0nhskimse1@gmail.com2026-01-20T03:34:13Zurn:sha1:a1618d0f7b576e55230ef709af750f2933a65db4
- simplify nftables rules by removing DPIBREAK chain
linux: refactor rules backend into iptables/nftables modules2026-01-22T15:18:43Zdilluti0nhskimse1@gmail.com2026-01-20T05:23:56Zurn:sha1:7555c95ccd072335762cf2248edcfa83711c6437
Split iptables and nftables rule management into dedicated modules.
Keep linux.rs focused on shared helpers and rule dispatch.
(cherry picked from commit 60c0011ca0cf5a463056fca17f2f747e762e19f9)