ginuerzh d778c031eb test(e2e): transparent whitelist bypass + sniffing (gost#899) ...

Reproduce the regression where a domain-only whitelist bypass on a red
(transparent) proxy rejected every connection: the pre-sniffing bypass
check ran against the bare destination IP, which is never in a domain
whitelist, before SNI sniffing could match. A privileged container
redirects outbound TCP to the red service; asserts an allowlisted SNI
is forwarded (hello-gost) and a non-allowlisted SNI is rejected.

2026-08-31 22:35:03 +08:00

..

whitelist.yaml

test(e2e): transparent whitelist bypass + sniffing (gost#899)

2026-08-31 22:35:03 +08:00