WHITE PAPER
自研 AnyTLS 协议工程原理与深度技术白皮书
解构无特征真实 TLS 伪装、零 RTT 极速握手与抗主动探测防御架构。
白皮书核心结论:AnyTLS 协议彻底消除了 Shadowsocks 等早期协议的高熵特征,并克服了通用 Trojan 无法抵御高级主动嗅探的缺陷,是专线出海的高端标准协议。
1. 真实 TLS 1.3 密码套件
流量完全遵循 RFC 8446 标准,支持 TLS_AES_256_GCM_SHA384 与 TLS_CHACHA20_POLY1305_SHA256,所有握手特征与主流浏览器 Chrome 128+ 完全一致。
2. 零 RTT 极速复用
利用 Early Data 与动态会话凭证实现 0-RTT 握手复用,国内端到香港专线握手时延降低至 10ms 以内,媲美本地局域网响应。
3. 防探测动态验证机制
当收到非授权的主动探测数据包时,服务端自动回退为标准合法的 HTTP 响应并记录黑名单,绝不回显任何特征应答。
anytls-handshake-trace.log
[AnyTLS-Engine] Client Hello Sent: CipherSuites=[TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256]
[AnyTLS-Engine] Server Hello Recv: Selected TLS_AES_256_GCM_SHA384, Zero-RTT Accepted
[AnyTLS-Engine] Key Exchange: X25519 Curve, ECDHE Shared Secret Computed in 0.8ms
[AnyTLS-Engine] Direct Forwarding Initiated -> BGP Shanghai Ingress -> IEPL Pure Core
[AnyTLS-Engine] Status: TLS 1.3 Certified | Bypass Rate: 100%
[AnyTLS-Engine] Server Hello Recv: Selected TLS_AES_256_GCM_SHA384, Zero-RTT Accepted
[AnyTLS-Engine] Key Exchange: X25519 Curve, ECDHE Shared Secret Computed in 0.8ms
[AnyTLS-Engine] Direct Forwarding Initiated -> BGP Shanghai Ingress -> IEPL Pure Core
[AnyTLS-Engine] Status: TLS 1.3 Certified | Bypass Rate: 100%