NaïveProxy is a proxy tool that uses Chromium's network stack to camouflage traffic with strong censorship resistance and low detectability.
The tool addresses traffic analysis attacks that censors use to identify and block proxy connections. It mitigates website fingerprinting through HTTP/2 traffic multiplexing and preamble parroting, defeats TLS parameter fingerprinting by reusing Chrome's network stack, resists active probing through application fronting behind standard frontend servers, and reduces length-based traffic analysis through padding and fragmentation. The architecture places a NaïveProxy client between a browser and a censor, connecting to a frontend server that routes based on HTTP authorization headers, which then connects to a NaïveProxy server that acts as a forward proxy with packet length padding.
NaïveProxy suits users who need to circumvent censorship and want traffic that resembles ordinary Chrome browser connections. The frontend server can be any well-known reverse proxy supporting HTTP/2 routing by authorization headers, such as Caddy with its forwardproxy plugin or HAProxy. The project provides a fork of Caddy's forwardproxy that adds NaïveProxy's padding layer. The tool runs on Windows, Linux, macOS, Android, and OpenWrt, with client setup requiring only a configuration file to expose a SOCKS5 proxy locally. Users should maintain the latest version to keep traffic signatures identical to Chrome.
Development activity shows consistent maintenance with automated build workflows. The project accepts third-party integrations, as evidenced by GUI client support. Documentation covers server setup with example configurations, client parameter usage, and performance tuning guidance. The codebase is written in C++ and built from Chromium's network stack components.
