Hope to add ECH and mitm intermediary function

[jiegengxiangjianxue]

ECH can better prevent some operators from accessing the websites I visit and prevent it from dns pollution of the websites I visit. The mitm middleman function can decrypt the doh traffic of other software that uses doh and redirect it to the doh set by lxbox, which is more convenient for advertising
These features are all very important, and I sincerely hope that developers will consider the features I mentioned above

[Leadaxe]

Thanks for the suggestions!

ECH — this is actually possible today via a raw JSON config: if you run your own outbound server with ECH enabled, you can put the ech block directly into the tls section of the outbound. The core supports it. The catch is that it requires preparing your own server, which is fairly involved and not something most users can do — so we don't plan to add it as a one-tap UI feature for now. Note also that when your traffic already goes through the tunnel, the operator can't see which sites you visit regardless of ECH; ECH there mainly hides the SNI of the connection to the proxy server itself.

MITM DoH interception — we may look into this later, but it's not planned right now.

Keeping this open for tracking.

[jiegengxiangjianxue]

谢谢你的建议！

ECH——现在通过原始JSON配置其实可以实现：如果你自己运行启用ECH的出站服务器，可以直接把块放到出站的部分。核心支撑着它。但问题是，这需要你自己准备服务器，这相当复杂，大多数用户都做不到——所以我们暂时不打算把它作为一键操作的UI功能加入。还要注意，当你的流量已经通过隧道时，运营商无论ECH如何都无法看到你访问了哪些站点;那里的ECH主要隐藏了连接到代理服务器本身的SNI。ech``tls

中间人（MITM）DoH拦截——我们可能以后会研究，但目前还没有计划。

保持这段记录以便追踪。

What is an ECH server? My DNS should support ECH.