3.9K ·GitHub
What is this?
MasterHttpRelayVPN is a local proxy that routes your browser traffic through a Google Apps Script relay using domain fronting and MITM TLS interception, designed to evade DPI and censorship.
MasterHttpRelayVPN is a local proxy that routes your browser traffic through a Google Apps Script relay using domain fronting and MITM TLS interception, designed to evade DPI and censorship.Is this a standalone app or something I run as a background process?It's a local Python proxy server you run on your machine; it exposes an HTTP proxy and a SOCKS5 port that you point your browser or apps at.
It's a local Python proxy server you run on your machine; it exposes an HTTP proxy and a SOCKS5 port that you point your browser or apps at.How do I get it running?Deploy the included Google Apps Script relay (copy appsscript/Code.gs into a new Apps Script project, set your AUTHKEY, and deploy as a web app), then download this repo and run the one-click launcher for Windows or Linux/macOS, which sets up a virtual environment and starts the proxy.
Deploy the included Google Apps Script relay (copy appsscript/Code.gs into a new Apps Script project, set your AUTHKEY, and deploy as a web app), then download this repo and run the one-click launcher for Windows or Linux/macOS, which sets up a virtual environment and starts the proxy.Do I need a Google account or server to use this?You just need a free Google account to deploy the Apps Script relay; no VPS is required for the basic setup, though you can optionally add a Cloudflare Workers or VPS exit node for sites that block Google IPs.
You just need a free Google account to deploy the Apps Script relay; no VPS is required for the basic setup, though you can optionally add a Cloudflare Workers or VPS exit node for sites that block Google IPs.Does this work with every website, like ChatGPT?Some sites such as ChatGPT or those using Turnstile may block the Google exit IP and require setting up an optional exit node (Cloudflare Workers or a VPS) to work properly.
Some sites such as ChatGPT or those using Turnstile may block the Google exit IP and require setting up an optional exit node (Cloudflare Workers or a VPS) to work properly.Can I share the proxy with my phone or other devices on my network?Yes, there's a LAN Sharing guide for connecting other devices on your local network including Android and iOS, and Docker instructions for containerized deployment.
Yes, there's a LAN Sharing guide for connecting other devices on your local network including Android and iOS, and Docker instructions for containerized deployment.Is it safe to share my config with others?No — the README explicitly warns never to share your config.json, authkey, CA certificate folder, or an exit-node URL together with a valid PSK, since that would expose your proxy to misuse.
No — the README explicitly warns never to share your config.json, authkey, CA certificate folder, or an exit-node URL together with a valid PSK, since that would expose your proxy to misuse.Why does it need to install a CA certificate?It performs MITM TLS interception to inspect and relay HTTPS traffic, so after starting, it automatically installs a certificate authority (CA) on your machine so your browser trusts the intercepted connections.
It performs MITM TLS interception to inspect and relay HTTPS traffic, so after starting, it automatically installs a certificate authority (CA) on your machine so your browser trusts the intercepted connections.What is domain fronting used for here?Domain fronting disguises the real destination of traffic by routing it through a trusted Google domain (Apps Script), making it harder for censors to block or detect based on the destination hostname.
Domain fronting disguises the real destination of traffic by routing it through a trusted Google domain (Apps Script), making it harder for censors to block or detect based on the destination hostname.Does it also bypass YouTube restrictions?Yes, the README states YouTube safe search and live streaming are bypassed and working by default, without needing a separate relay or exit node for that.
Yes, the README states YouTube safe search and live streaming are bypassed and working by default, without needing a separate relay or exit node for that.What are similar projects?mhr-cfw, MasterHttpRelayVPN-RUST, mtproto.zig, CFNext, gost, hysteria, Xray-core, brook
mhr-cfw, MasterHttpRelayVPN-RUST, mtproto.zig, CFNext, gost, hysteria, Xray-core, brookWhich topics is it in?dpi, sni, dns-over-https, relay, mitm, socks5, tunnel, reverse-proxy, tls, censorship-circumvention, google, vpn
dpi, sni, dns-over-https, relay, mitm, socks5, tunnel, reverse-proxy, tls, censorship-circumvention, google, vpn