Update default_port and sni logic to improve reverse proxy reachability (#947)

This commit is contained in:
Zisu Zhang
2025-06-07 08:19:31 +08:00
committed by GitHub
parent a6773aa549
commit d34a51739f
2 changed files with 14 additions and 2 deletions
+5 -2
View File
@@ -202,8 +202,11 @@ impl WSTunnelConnector {
init_crypto_provider();
let tls_conn =
tokio_rustls::TlsConnector::from(Arc::new(get_insecure_tls_client_config()));
// Modify SNI logic: always use "localhost" as SNI to avoid IP blocking.
let sni = "localhost";
// Modify SNI logic: use "localhost" as SNI for url without domain to avoid IP blocking.
let sni = match addr.domain() {
None => "localhost".to_string(),
Some(domain) => domain.to_string(),
};
let server_name = rustls::pki_types::ServerName::try_from(sni)
.map_err(|_| TunnelError::InvalidProtocol("Invalid SNI".to_string()))?;
let stream = tls_conn.connect(server_name, stream).await?;