Add proxyless censorship resillience about probe HOT 5 OPEN

Nice, thank you for pointing this out! It seems we were working in similar directions, in that we're also doing happy eyeballs and trying different strategies and caching what works. I will take a look at your implementation and see what we can learn from it and whether there's code with can integrate (with attribution!) to improve how we're doing. I'd rather avoid adding external dependencies at this time, since we already have significant issues with finding out the right version of packages for all dependencies. Thanks again!

from probe.

The Outline SDK is very lean. We wrote our own code for Shadowsocks, SOCKS5 and Web Proxy. We have very few, small dependencies, and don’t rewrite any dependency, so it shouldn’t give you much trouble.

from probe.

You may want to check out our strategy finder as well:
https://github.com/Jigsaw-Code/outline-sdk/blob/main/x/smart/stream_dialer.go

from probe.

Thank you!

from probe.

I did some more investigation in the OONI implementation.

The transport is injected into the http.Client in Network.NewHTTPClient

The transport is created in network.NewNetwork

This is where the TLS handshake actually happens: https://github.com/ooni/probe-cli/blob/cd2a9f7f73cd9d16ec1d8fa377bd46396afc26f9/internal/enginenetx/httpsdialer.go#L397

from probe.