A protocol that can disguise your proxy traffic as regular TLS traffic:

• Disguise your proxy server as any TLS server, such as microsoft.com.
• Developed based on utls, Disguise your proxy client as a normal browser.
• Use the Restls-Script protocol to conceal your proxy behavior and break characteristics such as "TLS in TLS".

一个可以把你的代理流量伪装成普通TLS流量りゅうりょう的てき协议：

• 把わ你的代理だいり服ふく务器伪装成なり任にん何なん一いち个TLS服ふく务器，例れい如microsoft.com。
• 基もと于utls开发，把わ你的代理だいり客きゃく户端伪装成なり一个普通的浏览器。
• 使用しようRestls「剧本」协议，隐藏你的代理だいり行ぎょう为，破やぶ坏"TLS in TLS"等とう特とく征せい。

"TLS in TLS" and other proxy-specific traffic behaviors can be used to identify TLS-based protocols. A typical "TLS in TLS" connection is shown in the following diagram:

"TLS in TLS"等とう代理だいり特有とくゆう流量りゅうりょう行ぎょう为可以被用よう来らい识别基もと于TLS的てき协议，一いち个典型がた的てき"TLS in TLS"连接如图所しょ示しめせ：

Restls disrupts these obvious proxy behavior characteristics through the use of "restls-scripts". The following diagram shows Restls traffic disguised using restls-scripts:

Restls通どおり过「剧本」机つくえ制せい来らい破やぶ坏这些明显的代理だいり行ぎょう为特征せい，下しも图为使用しよう「剧本」伪装后きさき的てきRestls流量りゅうりょう：

If you want to learn more about how restls-scripts work and how to design your own, please refer to: Restls-Script: Hide Your Proxy Traffic Behavior

如果你想了解りょうかい更さら多た关于「剧本」是ぜ如何いか运作的てき，以及如何いか设计自己じこ的てき「剧本」，请参考さんこう：Restls-Script: 隐藏你的代理だいり行ぎょう为

Download the latest release

Or build it from source:

cargo build --release

Basic usage:

USAGE:
    restls --forward-to <forward-to> --listen <listen> --log-level <log-level> --password <password> --server-hostname <server-hostname> --script <script>

To deploy a Restls Service:

1. Start the shadowsocks server:

   ss-server -s 127.0.0.1 -p 8888 -k [YOUR_SS_PASSWORD]
   

2. Start the Restls server: To parrot a TLS 1.3 server:

   restls -s "www.microsoft.com" -l "0.0.0.0:443" -p [YOUR_RESTLS_PASSWORD] -f "127.0.0.1:8888" --script "200?100,400?100,1200?200<1,1100~300,1000~100<1,2500~500,1300~50,1300~50,100~1200"
   

   Or to parrot a TLS 1.2 server:

   restls -s "vscode.dev" -l "0.0.0.0:443" -p [YOUR_RESTLS_PASSWORD] -f "127.0.0.1:8888" --script "200?100,400?100,1200?200<1,1100~300,1000~100<1,2500~500,1300~50,1300~50,100~1200"
   

3. Define a restls proxy in Clash.Meta Restls fork

   - name: restls-tls13
     type: ss
     server: [YOUR_SERVER_IP]
     port: 443
     cipher: chacha20-ietf-poly1305
     password: [YOUR_SS_PASSWORD]
     plugin: restls
     plugin-opts:
         host: "www.microsoft.com" # Must be a TLS 1.3 server
         password: [YOUR_RESTLS_PASSWORD]
         version-hint: "tls13"
         client-id: chrome # One of: chrome, ios, firefox or safari
   - name: restls-tls12
     type: ss
     server: [YOUR_SERVER_IP]
     port: 443
     cipher: chacha20-ietf-poly1305
     password: [YOUR_SS_PASSWORD]
     plugin: restls
     plugin-opts:
         host: "vscode.dev" # Must be a TLS 1.2 server
         password: [YOUR_RESTLS_PASSWORD]
         version-hint: "tls12"
         client-id: firefox # One of: chrome, ios, firefox or safari