Repo brief: wangyu-/udp2raw

Generated by RepoPilot · document generated 2026-09-12 · concise human review Evidence snapshot · analyzed 2026-09-12T21:35:39.018Z · commit 4208db6e27c4

Verdict

Mixed — Slowing — last commit 7mo ago

• Last commit 7mo ago
• 9 active contributors
• MIT licensed

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests

What it is

udp2raw is a raw socket tunnel that converts UDP traffic into encrypted UDP/FakeTCP/ICMP packets to bypass UDP firewalls and QoS restrictions. It encrypts payloads with AES-128-CBC, simulates TCP 3-way handshakes and sequence numbers in FakeTCP mode (while maintaining UDP's real-time out-of-order delivery), and supports connection recovery via heartbeat-based failure detection and automatic port rotation. Monolithic C++ application: client.cpp and server.cpp are entry points, connection.h/connection.cpp manage tunnel state, encrypt.h/encrypt.cpp handle AES-128-CBC and HMAC-SHA1, fd_manager handles raw sockets, and common.h/common.cpp provide utilities. Build system uses CMakeLists.txt and…

Start here

Open these first:

• client.cpp — Main client-side entry point that initializes the tunnel, handles command-line arguments, and orchestrates the UDP-to-raw…
• connection.h — Core abstraction defining the connection state machine and packet processing logic shared between client and server modes.
• connection.cpp — Implements connection lifecycle, packet encapsulation/decapsulation, and protocol state transitions for all tunnel modes.
• common.h — Defines shared data structures, constants, and utility macros used throughout the codebase for protocol handling.
• encrypt.cpp — Implements encryption/decryption engine wrapping AES and PBKDF2, critical for all tunnel traffic security.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/wangyu-/udp2raw.git
cd udp2raw
make
# or: cmake . && make
sudo ./udp2raw -s -l 0.0.0.0:4096 -r 127.0.0.1:8080 -k 'your-key' --mode fakeTcp
sudo ./udp2raw -c -l 127.0.0.1:1234 -r 'server-ip:4096' -k 'your-key' --mode fakeTcp

Requires root or CAP_NET_RAW capability; no external dependencies to install.

Daily commands:

Server mode: sudo ./udp2raw -s -l 0.0.0.0:4096 -r 127.0.0.1:8080 -k 'password' --mode fakeTcp. Client mode: sudo ./udp2raw -c -l 127.0.0.1:1234 -r server-ip:4096 -k 'password' --mode fakeTcp. See example.conf for fu…

…shortened for this brief.

Key cautions & unknowns

• Slowing — last commit 7mo ago
• Single-maintainer risk — top contributor 84% of recent commits
• Raw socket operations require root or explicit CAP_NET_RAW Linux capability (sudo not always sufficient on some systems); IP_HDRINCL requires manually constructing full IP headers, which breaks on systems with…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.