Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

🕵️‍♀️ Distortion proxies

artistical representation of rama distort proxy as llama desguised as human in badly masked environment
Distorting proxy refers to a type of proxy server that masks the client's IP address by modifying the HTTP headers and presents a fake IP address to the target server. It is often used to enhance privacy, add a layer of anonymity, and limit the ability to monitor the user's browsing activity.

— NordVPN

Examples:

  • /examples/src/http_mitm_relay_proxy_boring.rs: An HTTP(S) MITM relay proxy which mirrors the client’s TLS ClientHello towards the target, and uses ProfileEmulateLayer to auto-detect the client’s user-agent profile and emulate its outgoing request headers.

Description

%3clientclientproxy (rama)proxy (rama)client->proxy (rama)server Aserver Aproxy (rama)->server Aupstream proxyupstream proxyproxy (rama)->upstream proxyserver Bserver Bupstream proxy->server B

The Http/Tls content, version, config and flow can be adapted by the distortion proxy, often in function of a specific web client it wishes to emulate. The IP Address can be changed by the use of an upstream proxy.

The goal is to ensure your requests are not being fingerprinted either as a collective or in order to connect you to a technology stack or origin seen as malicious.