TAP and lwIP (True resistant TCP)

[free-the-internet]

Here is my 2 cents on TCP proxy method to make it truly resistant.
Problem:
Using the native OS stack in both server and client side, you don't have full control on TCP to prevent it from doing handshake, etc.

Solution:
Use lightweight IP stack like lightweightIP (lwIP: https://en.wikipedia.org/wiki/LwIP), modify it's TCP behavior to connect without SYN (the after all the assumption is user is sure that server is up and listening).
Use TAP interface (or possibly TUN) to inject custom TCP to OS data link layer (or IP layer).

The reason why your can't use CAP_NET_RAW (raw sockets) is the protocol ID. If you set it to TCP, then kernel would take over that packet.

Thanks for your efforts for bringing freedom for internet surfers.

[GFW-knocker]

@free-the-internet
as far as i know, there is no way to send crafted tcp packet on device without root (i.e non-rooted Android)
if root access available (windows,linux,...) we can send any custom packet easily

so the only problem is of mobile device.
are you telling that lwIP can send crafted packet without root access? (gpt say it cant)
i guess all methods TUN,TAP,VPN,etc respect kernel stack at the end.

[free-the-internet]

Yes it is possible.
See this for example: https://github.com/kawasin73/tcpip-stack or https://github.com/chobits/tapip and we only need TCP here.

i guess all methods TUN,TAP,VPN,etc respect kernel stack at the end.

No, TUN operates at layer 3, and TAP at layer 2.