meek-server

Overview ¶

Command meek-server is a domain-frontable HTTP endpoint that terminates the meek-v1 protocol and forwards each session's bytes to a configured TCP upstream (typically a SOCKS5 inbound on localhost).

Deployment: runs behind a CDN (Akamai DSA, CloudFront alt-domain distribution) that terminates TLS and forwards plain HTTP to the server's --listen address. The CDN's inner Host header carries the client's session over the fronted connection.

Example, running on Linode behind nginx-as-TLS-terminator on :443 with a sing-box SOCKS5 inbound on localhost:1080:

meek-server -listen :8080 -upstream 127.0.0.1:1080