GoodbyeDPI Go Implementation

IPTables Setup

Initialize (redirect traffic to NFQUEUE)

# Redirect outgoing HTTP traffic to queue 0 (except our marked packets)
sudo iptables -A OUTPUT -p tcp --dport 80 -m mark ! --mark 1 -j NFQUEUE --queue-num 0
# Redirect incoming HTTP traffic to queue 0
sudo iptables -A INPUT -p tcp --sport 80 -j NFQUEUE --queue-num 0

# Redirect outgoing HTTPS traffic to queue 0 (except our marked packets)
sudo iptables -A OUTPUT -p tcp --dport 443 -m mark ! --mark 1 -j NFQUEUE --queue-num 0
# Redirect incoming HTTPS traffic to queue 0
sudo iptables -A INPUT -p tcp --sport 443 -j NFQUEUE --queue-num 0

# Redirect DNS traffic (both UDP and TCP)
sudo iptables -A OUTPUT -p udp --dport 53 -j NFQUEUE --queue-num 0
sudo iptables -A INPUT -p udp --sport 53 -j NFQUEUE --queue-num 0
sudo iptables -A OUTPUT -p udp --dport 1253 -j NFQUEUE --queue-num 0
sudo iptables -A INPUT -p udp --sport 1253 -j NFQUEUE --queue-num 0

List Rules

# Show all current iptables rules
sudo iptables -L -v -n

Reset/Clear Rules

# Flush all rules (use with caution)
sudo iptables -F

Note: The program requires root privileges to access NFQUEUE and send raw packets.

Requirements

• Go 1.19 or later
• Linux system with NFQUEUE support
• Root privileges for packet manipulation

Building

go build -o goodbyedpi-linux ./cmd/goodbyedpi

Credits

This is a Go port of the original GoodbyeDPI project. Thanks to:

• @basil00 for WinDivert
• BlockCheck contributors
• Original GoodbyeDPI developers

Related Projects

For other DPI circumvention tools, check out:

• Original GoodbyeDPI
• Green Tunnel
• PowerTunnel

License

This project is licensed under the same terms as the original GoodbyeDPI project.