zapret2

I built an OPNsense plugin with a Strategy Lab for testing DPI bypass configurations Hi r/homelab! I'd like to share a project I've been working on since May 2026: os-zapret2-restyle, a free, open-source plugin that integrates Zapret2 with OPNsense. GitHub: Tolian82/os-zapret2-restyle I run and test OPNsense in my own network lab, and I wanted something more convenient than manually experimenting with DPI bypass parameters and managing the runtime from the shell. The project was originally inspired by ugorur/os-zapret2. Many thanks to Umurcan Gorur for that initial OPNsense integration, and to bol-van for developing the underlying Zapret2 engine. What does it do? The plugin provides a native OPNsense WebGUI for managing Zapret2 and testing traffic-processing strategies. The main features are: - Strategy Lab: Automatically tests DPI bypass candidates against a selected destination from the firewall's actual network path. It checks TLS, HTTP, QUIC/HTTP3, and UDP behavior, verifies promising candidates, and reports reproducible results. - Traffic Strategies: Configurable TCP/UDP profiles using native dvtws2 syntax, HOSTLIST, IPSET, and custom parameters. - Voice Transmission: Experimental UDP/STUN profiles for Telegram, Discord, X, SIP, and custom services. Successful voice calls are not yet guaranteed. - Additional resources: Optional Lua scripts and binary payloads for strategy discovery. - Service management: Zapret2 installation/version switching, transactional configuration Apply, IPFW integration, health checks, and rollback. - Bilingual interface: English and Russian. The screenshot The attached image shows an actual completed Strategy Lab run against www.youtube.com. The laboratory found three stable candidates during that particular test, displayed the generated profile, and successfully restored the original Zapret2 service. Results depend on the ISP, destination, network conditions, and selected tests. This isn't a universal bypass preset. View the screenshot and architecture in the GitHub README. Development status The current stable release is v0.6.0, targeting OPNsense 26.7 / FreeBSD 15 amd64. I'm actively developing v0.6.1, focusing on full IPv4/IPv6 support, global destination-IP exclusions, and IPv6 Strategy Lab testing. Further plans include Voice/P2P research, improved laboratory recovery, additional diagnostics, and performance optimization. The plugin is distributed through an independent, unofficial package repository. Since it processes firewall traffic with elevated privileges, I recommend reviewing the code and trying it in a test environment first. A note about AI-assisted development I've worked in IT for 26 years, primarily in systems architecture, but software development itself is relatively new to me. I define the requirements, architecture, testing scenarios, and project direction. ChatGPT generates a substantial portion of the implementation and documentation under my direction, while I test and validate the results on OPNsense and FreeBSD. I've also been keeping extensive project documentation to make the decisions and development process easier to review. My long-term goal is to reach v1.0.0 and eventually explore a pfSense port. I'd genuinely appreciate feedback, especially on security, FreeBSD/IPFW integration, packaging, and reliability. Source code: Tolian82/os-zapret2-restyle Thanks for taking a look!

I built an OPNsense plugin with a Strategy Lab for testing DPI bypass configurations Hi r/homelab! I'd like to share a project I've been working on since May 2026: os-zapret2-restyle, a free, open-source plugin that integrates Zapret2 with OPNsense. GitHub: Tolian82/os-zapret2-restyle I run and test OPNsense in my own network lab, and I wanted something more convenient than manually experimenting with DPI bypass parameters and managing the runtime from the shell. The project was originally inspired by ugorur/os-zapret2. Many thanks to Umurcan Gorur for that initial OPNsense integration, and to bol-van for developing the underlying Zapret2 engine. What does it do? The plugin provides a native OPNsense WebGUI for managing Zapret2 and testing traffic-processing strategies. The main features are: - Strategy Lab: Automatically tests DPI bypass candidates against a selected destination from the firewall's actual network path. It checks TLS, HTTP, QUIC/HTTP3, and UDP behavior, verifies promising candidates, and reports reproducible results. - Traffic Strategies: Configurable TCP/UDP profiles using native dvtws2 syntax, HOSTLIST, IPSET, and custom parameters. - Voice Transmission: Experimental UDP/STUN profiles for Telegram, Discord, X, SIP, and custom services. Successful voice calls are not yet guaranteed. - Additional resources: Optional Lua scripts and binary payloads for strategy discovery. - Service management: Zapret2 installation/version switching, transactional configuration Apply, IPFW integration, health checks, and rollback. - Bilingual interface: English and Russian. The screenshot The attached image shows an actual completed Strategy Lab run against www.youtube.com. The laboratory found three stable candidates during that particular test, displayed the generated profile, and successfully restored the original Zapret2 service. Results depend on the ISP, destination, network conditions, and selected tests. This isn't a universal bypass preset. View the screenshot and architecture in the GitHub README. Development status The current stable release is v0.6.0, targeting OPNsense 26.7 / FreeBSD 15 amd64. I'm actively developing v0.6.1, focusing on full IPv4/IPv6 support, global destination-IP exclusions, and IPv6 Strategy Lab testing. Further plans include Voice/P2P research, improved laboratory recovery, additional diagnostics, and performance optimization. The plugin is distributed through an independent, unofficial package repository. Since it processes firewall traffic with elevated privileges, I recommend reviewing the code and trying it in a test environment first. A note about AI-assisted development I've worked in IT for 26 years, primarily in systems architecture, but software development itself is relatively new to me. I define the requirements, architecture, testing scenarios, and project direction. ChatGPT generates a substantial portion of the implementation and documentation under my direction, while I test and validate the results on OPNsense and FreeBSD. I've also been keeping extensive project documentation to make the decisions and development process easier to review. My long-term goal is to reach v1.0.0 and eventually explore a pfSense port. I'd genuinely appreciate feedback, especially on security, FreeBSD/IPFW integration, packaging, and reliability. Source code: Tolian82/os-zapret2-restyle Thanks for taking a look!

I built an OPNsense plugin with a Strategy Lab for testing DPI bypass configurations Hi r/homelab! I'd like to share a project I've been working on since May 2026: os-zapret2-restyle, a free, open-source plugin that integrates Zapret2 with OPNsense. GitHub: Tolian82/os-zapret2-restyle I run and test OPNsense in my own network lab, and I wanted something more convenient than manually experimenting with DPI bypass parameters and managing the runtime from the shell. The project was originally inspired by ugorur/os-zapret2. Many thanks to Umurcan Gorur for that initial OPNsense integration, and to bol-van for developing the underlying Zapret2 engine. What does it do? The plugin provides a native OPNsense WebGUI for managing Zapret2 and testing traffic-processing strategies. The main features are: - Strategy Lab: Automatically tests DPI bypass candidates against a selected destination from the firewall's actual network path. It checks TLS, HTTP, QUIC/HTTP3, and UDP behavior, verifies promising candidates, and reports reproducible results. - Traffic Strategies: Configurable TCP/UDP profiles using native dvtws2 syntax, HOSTLIST, IPSET, and custom parameters. - Voice Transmission: Experimental UDP/STUN profiles for Telegram, Discord, X, SIP, and custom services. Successful voice calls are not yet guaranteed. - Additional resources: Optional Lua scripts and binary payloads for strategy discovery. - Service management: Zapret2 installation/version switching, transactional configuration Apply, IPFW integration, health checks, and rollback. - Bilingual interface: English and Russian. The screenshot The attached image shows an actual completed Strategy Lab run against www.youtube.com. The laboratory found three stable candidates during that particular test, displayed the generated profile, and successfully restored the original Zapret2 service. Results depend on the ISP, destination, network conditions, and selected tests. This isn't a universal bypass preset. View the screenshot and architecture in the GitHub README. Development status The current stable release is v0.6.0, targeting OPNsense 26.7 / FreeBSD 15 amd64. I'm actively developing v0.6.1, focusing on full IPv4/IPv6 support, global destination-IP exclusions, and IPv6 Strategy Lab testing. Further plans include Voice/P2P research, improved laboratory recovery, additional diagnostics, and performance optimization. The plugin is distributed through an independent, unofficial package repository. Since it processes firewall traffic with elevated privileges, I recommend reviewing the code and trying it in a test environment first. A note about AI-assisted development I've worked in IT for 26 years, primarily in systems architecture, but software development itself is relatively new to me. I define the requirements, architecture, testing scenarios, and project direction. ChatGPT generates a substantial portion of the implementation and documentation under my direction, while I test and validate the results on OPNsense and FreeBSD. I've also been keeping extensive project documentation to make the decisions and development process easier to review. My long-term goal is to reach v1.0.0 and eventually explore a pfSense port. I'd genuinely appreciate feedback, especially on security, FreeBSD/IPFW integration, packaging, and reliability. Source code: Tolian82/os-zapret2-restyle Thanks for taking a look!

@bidj8_vasbdj Zapret2 GitHub bol-van/zapret2 Конкретно себе я поставил z2k для кинетика github.com/necronicle/z2k/blob/z2k-enhanced/READM…

@theitiev @Rudeti Мир не только квном един. bol-van/zapret2