internal/

Package masquerade implements the splitting egress: a connection that fails to authenticate is forwarded verbatim to a real cover site, which answers it.

Package uotrouter wraps sing-box's UDP-over-TCP router so that route rules see the real destination of a UoT session rather than its magic address.