MITM V4

[DerafshAtur]

please update the MITM to V4 that was released by patterniha

check this out:
https://github.com/patterniha/MITM-DomainFronting

[dazzling-no-more]

Already done in this PR:
#488

[DerafshAtur]

Already done in this PR: #488

thanks can you also do this as PR:
#485 (comment)

[therealaleph]

@DerafshAtur — landed in v1.9.0 (just tagged ~5 min ago) via PR #488 by @dazzling-no-more.

The v1.9.0 release ports @patterniha's MITM-DomainFronting technique (the "MITM V4" you mentioned) into mhrv-rs's existing MITM + dispatch infrastructure as the new fronting_groups config field. Each group is {name, ip, sni, domains} — when a CONNECT to one of the member domains arrives, mhrv-rs MITMs at the local CA then re-encrypts upstream against ip with sni as the TLS SNI. Same trick we already do for Google + front_domain, now generalized to any multi-tenant CDN edge (Vercel, Fastly, etc.).

Working example at config.fronting-groups.example.json in main.

Full doc at docs/fronting-groups.md including:

• Recipe for picking (ip, sni) for a target CDN
• Routing precedence (fronting_groups wins over built-in Google fronting; loses to passthrough_hosts and DoH bypass)
• Explicit ⚠️ warning about the cross-tenant Host-header leak failure mode (don't list domains that aren't actually on the edge — could leak hostnames to the wrong cross-tenant property if your (ip, sni) mapping is wrong)

Other v1.9.0 changes worth knowing:

• mode = "google_only" renamed to mode = "direct" (alias google_only still works). The old name didn't fit anymore now that fronting reaches more than Google.
• Edge DNS cache in CodeFull.gs (PR feat(codefull.gs): edge-cache DNS to skip tunnel-node round-trip #494)
• Default tunnel_doh: true for Iranian users (از کار افتادن doh در chrome #468)
• Hotspot-share-friendly default listen_host: 0.0.0.0 (PR feat: listen on all interfaces, hotspot sharing for iOS/laptop #483)

Download when CI completes (~30 min from now): https://t.me/mhrv_rs or release page.

Closing this issue as completed — feature shipped. Credit to @patterniha for the original technique, @dazzling-no-more for the port to mhrv-rs, and you for filing the request.

---

_{[reply via Anthropic Claude | reviewed by @therealaleph]}

[therealaleph]

Shipped in v1.9.0 via PR #488 (multi-edge fronting_groups).