go >= 1.22
libpcap

Usage: spoofdpi [options...]
DESCRIPTION:
  spoofdpi - Simple and fast anti-censorship tool to bypass DPI
COPYRIGHT:
  Apache License, Version 2.0, January 2004
USAGE:
  spoofdpi [global options]
GLOBAL OPTIONS:
  --allow string
        perform DPI circumvention only on domains matching this regex pattern;
        can be given multiple times. these values have have higher priority
        than the values given with '--ignore' flag
  --cache-shards int
        number of shards to use for ttlcache; it is recommended to set this to be
        at least the number of CPU cores for optimal performance (default: 32, max: 255)
  --clean bool
        if set, all configuration files will be ignored
  --config, -c string
        custom location of the config file to load. options given through the command
        line flags will override the options set in this file. when not given, it will
        search sequentially in the following locations:
        $SPOOFDPI_CONFIG, /etc/spoofdpi.toml, $XDG_CONFIG_HOME/spoofdpi/spoofdpi.toml
        and $HOME/.config/spoofdpi/spoofdpi.toml
  --dns-addr string
        dns address (default: 8.8.8.8)
  --dns-ipv4-only bool
        resolve only IPv4 addresses
  --dns-port int
        port number for dns (default: 53)
  --doh-endpoint string
        endpoint for 'dns over https' (default: "https://${DNS_ADDR}/dns-query")
  --enable-doh bool
        enable 'dns-over-https'
  --fake-https-packets int
        number of fake packets to send before the client hello, higher values
        may increase success, but the lowest possible value is recommended.
        try this if tcp-level fragmentation (via --window-size) does not
        work. this feature requires root privilege and the 'libpcap'
        dependency (default: 0, max: 255)
  --ignore string
        do not perform DPI circumvention on domains matching this regex
        pattern; can be given multiple times.
  --listen-addr string
        IP address to listen on (default: 127.0.0.1)
  --listen-port int
        port number to listen on (default: 8080)
  --log-level string
        set log level (default: 'info')
  --silent bool
        do not show the banner and server information at start up
  --system-proxy bool
        automatically set system-wide proxy configuration
  --timeout int
        timeout in milliseconds; no effect when the value is 0 (default: 0, max: 66535)
  --version, -v bool
        print version; this may contain some other relevant information
  --window-size int
        chunk size, in number of bytes, for fragmented client hello,
        try lower values if the default value doesn't bypass the DPI;
        when not given, the client hello packet will be sent in two parts:
        fragmentation for the first data packet and the rest (default: 0, max: 255)
  --help, -h bool
        show help