Sign inSign up

wiktorbgu/byedpi-hev-socks5-tunnel

By wiktorbgu

•Updated 11 days ago

byedpi + hev-socks5-tunnel in one container! Great work on Mikrotik!

Image
Networking
Security
33

50K+

wiktorbgu/byedpi-hev-socks5-tunnel repository overview

Chat https://t.me/it_network_people⁠

⁠Tags list and description

⁠latest = redirect (after 2026.03.06 => byedpi-v0.17.3-hev-socks5-tunnel-v2.14.4)

Recommended! ✔
Standart container based OS Alpine with fast redirect TCP traffic over ByeDPI in transparent mode with lower CPU load
Weight ~15-20Mb

⁠mikro

The most minimalistic build with a minimum of necessary libraries without a full OS
Weight ~4Mb

⁠Optional ENV parameter for tag latest = redirect
VariableDescription
CMD_UDPBy default, the common command from cmd for the container is used for ByeDPI. If you need to set a different command for UDP traffic, you can use this ENV together with the team specified in the cmd.
QUICBy default, QUIC traffic is ACCEPT, but it heavily loads the processor and to reduce the load, you can block it by setting it to 0 or REJECT

⁠All versions support connection to 1080 socks port!

⁠

Chat https://t.me/it_network_people⁠

⁠

⁠Mikrotik settings

⁠Подробная инструкция настройки Mikrotik habr.ru⁠ или web.archive.org⁠ (на обоих ресурсах доступно только из-за границы)

/interface/bridge add name=Bridge-Docker port-cost-mode=short
/ip/address add address=192.168.254.1/24 interface=Bridge-Docker network=192.168.254.0
/interface/veth add address=192.168.254.2/24 gateway=192.168.254.1 name=BYEDPI-TUN
/interface/bridge/port add bridge=Bridge-Docker interface=BYEDPI-TUN
⁠change path /usb1 to your actual path
/container/config set registry-url=https://registry-1.docker.io tmpdir=/usb1/docker/pull 
/container/envs add list=QUIC_REJECT key=QUIC value=REJECT  
/container/add remote-image=wiktorbgu/byedpi-hev-socks5-tunnel interface=BYEDPI-TUN cmd="-Kt,h -s0+s -s3+s -s6+s -s9+s -s12+s -s15+s -s20+s -s30+s -An -Ku -a5 -An" root-dir=/usb1/docker/byedpi-hev-socks5-tunnel-redirect start-on-boot=yes envlists=QUIC_REJECT
⁠Table routing
/routing/table add disabled=no fib name=dpi_mark 

/ip/route add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.254.2%Bridge-Docker routing-table=dpi_mark  
⁠Route address list to BYEDPI TUNNEL
/ip firewall mangle add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-list=za_dpi_FWD in-interface-list=LAN new-connection-mark=to_dpi passthrough=yes
/ip firewall mangle add action=mark-routing chain=prerouting comment="To DPI" connection-mark=to_dpi in-interface-list=LAN new-routing-mark=dpi_mark passthrough=no routing-mark=!dpi_mark
⁠Fasttrack
/ip firewall filter set [find action=fasttrack-connection] connection-mark=no-mark
⁠RUN container and enjoy! =)
/container start [find interface=BYEDPI-TUN]

⁠GitHub⁠

Tag summary

Content type

Image

Digest

sha256:ed5dc2ac4…

Size

33.1 MB

Last updated

11 days ago

docker pull wiktorbgu/byedpi-hev-socks5-tunnel