wiktorbgu/byedpi-hev-socks5-tunnel

By wiktorbgu

Updated 8 days ago

byedpi + hev-socks5-tunnel in one container! Great work on Mikrotik!

Image
Networking
Security
33

10K+

wiktorbgu/byedpi-hev-socks5-tunnel repository overview

Chat https://t.me/it_network_people

Tags list and description

latest = redirect (after 2026.03.06 => byedpi-v0.17.3-hev-socks5-tunnel-v2.14.4)

Recommended! ✔
Standart container based OS Alpine with fast redirect TCP traffic over ByeDPI in transparent mode with lower CPU load
Weight ~15-20Mb

mikro

The most minimalistic build with a minimum of necessary libraries without a full OS
Weight ~4Mb

Optional ENV parameter for tag latest = redirect
VariableDescription
CMD_UDPBy default, the common command from cmd for the container is used for ByeDPI. If you need to set a different command for UDP traffic, you can use this ENV together with the team specified in the cmd.
QUICBy default, QUIC traffic is ACCEPT, but it heavily loads the processor and to reduce the load, you can block it by setting it to 0 or REJECT

All versions support connection to 1080 socks port!

Chat https://t.me/it_network_people

Mikrotik settings

Подробная инструкция настройки Mikrotik habr.ru или web.archive.org (на обоих ресурсах доступно только из-за границы)

/interface/bridge add name=Bridge-Docker port-cost-mode=short
/ip/address add address=192.168.254.1/24 interface=Bridge-Docker network=192.168.254.0
/interface/veth add address=192.168.254.2/24 gateway=192.168.254.1 name=BYEDPI-TUN
/interface/bridge/port add bridge=Bridge-Docker interface=BYEDPI-TUN
change path /usb1 to your actual path
/container/config set registry-url=https://registry-1.docker.io tmpdir=/usb1/docker/pull 
/container/envs add list=QUIC_REJECT key=QUIC value=REJECT  
/container/add remote-image=wiktorbgu/byedpi-hev-socks5-tunnel interface=BYEDPI-TUN cmd="-Kt,h -s0+s -s3+s -s6+s -s9+s -s12+s -s15+s -s20+s -s30+s -An -Ku -a5 -An" root-dir=/usb1/docker/byedpi-hev-socks5-tunnel-redirect start-on-boot=yes envlists=QUIC_REJECT
Table routing
/routing/table add disabled=no fib name=dpi_mark 

/ip/route add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.254.2%Bridge-Docker routing-table=dpi_mark  
Route address list to BYEDPI TUNNEL
/ip firewall mangle add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-list=za_dpi_FWD in-interface-list=LAN new-connection-mark=to_dpi passthrough=yes
/ip firewall mangle add action=mark-routing chain=prerouting comment="To DPI" connection-mark=to_dpi in-interface-list=LAN new-routing-mark=dpi_mark passthrough=no routing-mark=!dpi_mark
Fasttrack
/ip firewall filter set [find action=fasttrack-connection] connection-mark=no-mark
RUN container and enjoy! =)
/container start [find interface=BYEDPI-TUN]

GitHub

Tag summary

Content type

Image

Digest

sha256:32a816243

Size

1.8 MB

Last updated

8 days ago

docker pull wiktorbgu/byedpi-hev-socks5-tunnel:byedpi-v0.17.3-hev-socks5-tunnel-v2.15.0-mikro