mtproto-proxy-omnios

MTProto FakeTLS proxy release assets, source patch, SMF service files, IPFilter integration, and installer for OmniOS r151054 LTS.

Keywords

Keywords: #omnios #illumos #solaris #mtproto #telegram #faketls #smf #ipfilter #proxy #networking

Overview

This repository provides a reproducible build, installation, and operation path for an MTProto FakeTLS proxy on OmniOS Community Edition v11 r151054 LTS.

The proxy core is based on mtg v2.2.8 and is distributed as a dependency-free Solaris amd64 binary.

Technical Design

The OmniOS source patch adds Solaris-compatible socket reuse and TCP keepalive handling, reports listener failures to SMF, and includes a target-platform listener regression test.

SMF manages separate IPv4 and IPv6 service instances under a locked, no-login service account.

The installer creates a FakeTLS secret, stores it as root-only data, writes protected runtime configuration, and can add persistent IPv4 and IPv6 IPFilter rules for the selected public interface.

Target Profile

• Upstream project: 9seconds/mtg
• Upstream version: v2.2.8
• Operating system: OmniOS Community Edition v11 r151054 LTS
• Architecture: amd64
• Transport: Telegram MTProto over FakeTLS
• Service manager: SMF
• Firewall integration: IPFilter
• Default port: TCP 38443

Quick Start

Open a root shell on the OmniOS host, then run:

wget https://github.com/itinfra7/mtproto-proxy-omnios/releases/latest/download/install_mtproto_proxy_omnios.sh
chmod +x install_mtproto_proxy_omnios.sh
./install_mtproto_proxy_omnios.sh \
  --host proxy.example.com \
  --port 38443 \
  --interface vioif0 \
  --open-firewall

The hostname must resolve publicly and provide a reachable HTTPS service on TCP 443 for FakeTLS fronting.

Build

Go 1.26 or newer is required on the build host.

./build_release.sh v2.2.8-omnios.1

The build verifies the pinned upstream source archive, applies mtg-omnios.patch, runs the test suite, cross-compiles for solaris/amd64, and writes release archives and SHA-256 checksums under dist/.

Operations

svcs 'svc:/site/mtproto-proxy:*'
svcadm restart svc:/site/mtproto-proxy:ipv4
svcadm restart svc:/site/mtproto-proxy:ipv6
/opt/mtproto-proxy/sbin/show-connection

The connection helper is intended for a root shell because its output contains the proxy secret.

Release Assets

• install_mtproto_proxy_omnios.sh
• mtproto-proxy-omnios-v2.2.8-omnios.1-omnios-amd64.tar.gz
• mtproto-proxy-omnios-v2.2.8-omnios.1-source.tar.gz
• mtproto-proxy-omnios-v2.2.8-omnios.1-checksums.txt
• mtg-omnios.patch
• README.md
• LICENSE

Credits

9seconds/mtg provides the upstream MTProto proxy implementation.

OmniOS Community Edition provides the target operating system validated by this repository.

OmniOS adaptation and packaging: itinfra7 from GitHub