Software:Shadowsocks

From HandWiki
Short description: Free and open-source encrypted proxy project
Shadowsocks
Shadowsocks logo.png
Original author(s)Clowwindy
Initial release20 April 2012; 11 years ago (2012-04-20)[1][2]
Stable release(s) [±]

Shadowsocks is a free and open-source encryption protocol project, widely used in China to circumvent Internet censorship. It was created in 2012 by a Chinese programmer named "clowwindy", and multiple implementations of the protocol have been made available since.[3][4] Shadowsocks is not a proxy on its own, but (typically) is the client software to help connect to a third-party SOCKS5 proxy, which is similar to a Secure Shell (SSH) tunnel. Once connected, internet traffic can then be directed through the proxy.[5] Unlike an SSH tunnel, shadowsocks can also proxy User Datagram Protocol (UDP) traffic.

Takedown

On 22 August 2015, "clowwindy" announced in a GitHub thread that they had been contacted by the police and could no longer maintain the project.[6] The code of the project was subsequently branched with a removal notice.[7][8][9][10] Three days later, on 25 August, another proxy application, GoAgent, also had its GitHub repository removed.[8][9] The removal of the projects got media's attention, with news outlets speculating about the possible connection between the takedowns and a distributed-denial-of-service attack targeting GitHub that happened several days later.[11] Danny O'Brien, from Electronic Frontier Foundation, published a statement on the matter.[12]

Despite the takedown, collaborators of the project have continued the development of the project.

Server implementations

The original Python implementation can still be installed with Pip (package manager), but the contents of its GitHub repository have been removed.[13][14] Other server implementations include one in Go, Rust, and C using the libev event loop library; C++ with a Qt GUI; and Perl. The Go and Perl implementations are not updated regularly and may have been abandoned.[14][15][16][17]

Client implementations

All of the server implementations listed above also support operating in client mode. There are also client-only implementations available for Windows (shadowsocks-win), macOS (ShadowsocksX-NG), Android (shadowsocks-android), and iOS (Wingy).[18] Many clients, including shadowsocks-win and shadowsocks-android, support redirecting all system traffic over Shadowsocks, not just applications that have been explicitly configured to do so, allowing Shadowsocks to be used similarly to a VPN. If an application doesn't support proxy servers, a proxifier can be used to redirect the application to the Shadowsocks client. Some proxifiers, such as Proxycap, support Shadowsocks directly, thus avoiding the need for a Shadowsocks client, but some require a client.

Net::Shadowsocks

Net::Shadowsocks is name of the Perl implementation of Shadowsocks protocol client and server available on CPAN.[19]

ShadowsocksR

ShadowsocksR is a fork of the original Shadowsocks project, claimed to be superior in terms of security and stability. Upon release, it was found to violate the License by not having the source code of the C# client available.[20] It was also criticized for its solution to the alleged security issues in the source project. Shadowsocks is currently under development, while development of ShadowsocksR has stopped.[21]

Similar projects

Shadowsocks is similar to The Tor Project's Pluggable Transport (PT) idea. PT makes it hard for Internet Service Providers to detect Tor traffic. They also both use a socks proxy interface. Whereas Shadowsocks is simpler, Obfs4 used in PT is more obfuscated.[22] Unlike Obfs4, Shadowsocks is not resistant to Active Probing.[23] The most similar PT to Shadowsocks is Obfs3.

See also

References

  1. "发一个自用了一年多的翻墙工具 shadowsocks". http://www.v2ex.com/t/32777. 
  2. "Shadowsocks 的前世后生". http://www.chinagfw.org/2016/08/shadowsocks_31.html. 
  3. clowwindy (20 April 2012). "initial commit". https://github.com/shadowsocks/shadowsocks/commit/418156debaf9f242f3c2bcc4badaa63e6630cb2a. 
  4. "Ports and Clients". https://github.com/shadowsocks/shadowsocks/wiki/Ports-and-Clients. 
  5. "Shadowsocks – Protocol" (in en). https://shadowsocks.org/en/spec/Protocol.html. 
  6. clowwindy (22 August 2015). "Adopting iOS 9 network extension points". https://github.com/shadowsocks/shadowsocks-iOS/issues/124#issuecomment-133630294. "Two days ago the police came to me and wanted me to stop working on this. Today they asked me to delete all the code from GitHub. I have no choice but to obey. I hope one day I'll live in a country where I have freedom to write any code I like without fearing." 
  7. clowwindy (22 August 2015). "shadowsocks/shadowsocks@938bba3". https://github.com/shadowsocks/shadowsocks/commit/938bba32a4008bdde9c064dda6a0597987ddef54. 
  8. 8.0 8.1 Rudolph, Josh (25 August 2015). "Circumvention Tool Deleted After Police Visit Developer". China Digital Times. http://chinadigitaltimes.net/2015/08/circumvention-tool-deleted-after-police-visit-developer/. 
  9. 9.0 9.1 Percy (26 August 2016). "中国开发者被警察要求删除软件" (in zh). GreatFire. https://zh.greatfire.org/blog/2015/aug/chinese-developers-forced-delete-softwares-police. 
  10. Kan, Michael (30 August 2015). "China intensifies Internet censorship ahead of military parade". International Data Group. http://www.pcworld.com/article/2977109/china-intensifies-internet-censorship-ahead-of-military-parade.html. 
  11. Cimpanu, Catalin (29 August 2015). "Recent GitHub DDOS Linked to Chinese Government and Two GitHub Projects". Softpedia. http://news.softpedia.com/news/recent-github-ddos-linked-to-chinese-government-and-two-github-projects-490405.shtml. 
  12. O'Brien, Danny (28 August 2015). "Speech that Enables Speech: China Takes Aim at Its Coders". Electronic Frontier Foundation. https://www.eff.org/deeplinks/2015/08/speech-enables-speech-china-takes-aim-its-coders. 
  13. "Shadowsocks". https://github.com/shadowsocks/shadowsocks. 
  14. 14.0 14.1 "Shadowsocks Servers". https://shadowsocks.org/en/download/servers.html. 
  15. zhou0 (18 December 2017), shadowsocks-perl: An asynchronous, non-blocking shadowsocks client and server written in Perl, https://github.com/zhou0/shadowsocks-perl, retrieved 11 January 2018 
  16. shadowsocks-go: go port of shadowsocks, shadowsocks, 10 January 2018, https://github.com/shadowsocks/shadowsocks-go, retrieved 11 January 2018 
  17. shadowsocks-rust: A Rust port of shadowsocks, https://github.com/shadowsocks/shadowsocks-rust, retrieved 12 October 2019 
  18. "Shadowsocks - Clients" (in en). https://shadowsocks.org/en/download/clients.html. 
  19. "Net::Shadowsocks - the asynchronous, non-blocking shadowsocks client and server.". https://metacpan.org/pod/Net::Shadowsocks. 
  20. clowwindy (18 August 2015). "AppData & temp & 当前目录" (in zh). https://github.com/shadowsocks/shadowsocks-windows/issues/293#issuecomment-132253168. 
  21. "Long-term Shadowsocks Plan: ShadowsocksR versus Shadowsocks2 · Issue #501 · StreisandEffect/Streisand". https://github.com/StreisandEffect/streisand/issues/501. 
  22. https://censorbib.nymity.ch/pdf/Deng2017a.pdf [bare URL PDF]
  23. "How China Detects and Blocks Shadowsocks · Issue #22 · net4people/BBS". https://github.com/net4people/bbs/issues/22. 

External links