GO Simple Tunnel - a simple tunnel written in golang
 
 
 
 
 
Go to file
ginuerzh 64b71bd8a6
test(e2e): add utls dialer regression suite (#888)
Adds an e2e suite (tests/e2e/utls_test.go + testdata/utls/*)
that exercises the utls dialer in a forward-proxy chain:

  curl -> client gost (http proxy :8080)
       -> chain node (http connector + utls dialer)
         -> server gost (http over TLS listener :8443)
           -> tcp-echo

Two cases:

- TestUTLSInsecure: regression for go-gost/gost#887. A utls
  dialer with `secure: false` must still complete the handshake
  (InsecureSkipVerify must be honoured). The old unsafe cast read
  garbage for InsecureSkipVerify and the handshake failed.
- TestUTLSSecureWithCA: exercises the converter's RootCAs /
  ServerName path with a CA-signed server cert.

Uses the deterministic `Chrome` fingerprint (not `randomized`, which
randomises the ClientHello and is flaky against a standard Go TLS
server).

Bumps github.com/go-gost/x to v0.13.11, which fixes the
second half of #887: the curve-preference enum divergence between
crypto/tls and utls (Go 1.24+ appends PQC hybrid curves that
utls does not define).

Related: go-gost/gost#887, go-gost/x#111, go-gost/x#112
2026-07-11 15:46:39 +08:00
.github/workflows ci: harden docker/release/nightly GitHub Actions workflows 2026-06-19 19:11:25 +08:00
cmd/gost fix: use atomic int for multi-worker exit code and clean up cancellation 2026-06-21 21:07:37 +08:00
tests/e2e test(e2e): add utls dialer regression suite (#888) 2026-07-11 15:46:39 +08:00
.gitignore bump x to v0.10.1, go-shadowsocks2 to v0.1.3; add gost binary to .gitignore 2026-05-22 23:21:30 +08:00
.goreleaser.yaml fix: disable UPX compression to resolve #863 startup regression 2026-05-31 22:25:57 +08:00
CLAUDE.md add CLAUDE.md with build, CLI, and lifecycle documentation 2026-05-23 00:00:56 +08:00
Dockerfile fix: disable UPX compression in Dockerfile to resolve #863 startup regression 2026-06-03 00:13:58 +08:00
LICENSE add license 2021-07-06 09:52:51 +08:00
Makefile add support for linux/amd64v3, windows/amd64v3 2022-10-07 09:27:22 +08:00
README.md add proxyProtocol support for dialer 2025-08-03 15:38:57 +08:00
README_en.md add context for conn 2025-08-04 19:34:54 +08:00
go.mod test(e2e): add utls dialer regression suite (#888) 2026-07-11 15:46:39 +08:00
go.sum test(e2e): add utls dialer regression suite (#888) 2026-07-11 15:46:39 +08:00
gost.yml add hop 2022-09-22 18:59:56 +08:00
install.sh Update install.sh 2026-04-26 22:16:06 +08:00

README_en.md

GO Simple Tunnel

A simple security tunnel written in golang

en zh

Features

Overview

Overview

There are three main ways to use GOST as a tunnel.

Proxy

As a proxy service to access the network, multiple protocols can be used in combination to form a forwarding chain for traffic forwarding.

Proxy

Port Forwarding

Mapping the port of one service to the port of another service, you can also use a combination of multiple protocols to form a forwarding chain for traffic forwarding.

Forward

Reverse Proxy

Use tunnel and intranet penetration to expose local services behind NAT or firewall to public network for access.

Reverse Proxy

Installation

Binary files

https://github.com/go-gost/gost/releases

install script

# install latest from [https://github.com/go-gost/gost/releases](https://github.com/go-gost/gost/releases)
bash <(curl -fsSL https://github.com/go-gost/gost/raw/master/install.sh) --install
# select version for install 
bash <(curl -fsSL https://github.com/go-gost/gost/raw/master/install.sh)

From source

git clone https://github.com/go-gost/gost.git
cd gost/cmd/gost
go build

Docker

docker run --rm gogost/gost -V

Tools

GUI

go-gost/gostctl

WebUI

go-gost/gost-ui

Shadowsocks Android

hamid-nazari/ShadowsocksGostPlugin

Support

Wiki: https://gost.run

YouTube: https://www.youtube.com/@gost-tunnel

Telegram: https://t.me/gogost

Google group: https://groups.google.com/d/forum/go-gost

Legacy version: v2.gost.run