Agent skill · security · aradotso
mhr-cfw-domain-fronting-relay
Expert skill for setting up and using MHR-CFW, a domain-fronting relay that routes traffic through Google Apps Script and Cloudflare Workers to bypass DPI filtering.
Why this skill is useful
Includes executable scripts and detailed setup instructions for deploying a domain-fronting relay that bypasses DPI filtering, which are not commonly found in public documentation.
What it needs
Requires git, python installed locally. Requires cloudflare, google account access. About 5k tokens when loaded. Last updated 2026-07-09. 70 stars on the source repository.
What this skill does
MHR-CFW Domain-Fronting Relay Skill by ara.so — Daily 2026 Skills collection. MHR-CFW (MasterHttpRelay + Cloudflare Worker) is a Python-based domain-fronting relay that routes HTTP/SOCKS5 proxy traffic through Google Apps Script (GAS) and Cloudflare Workers. Network DPI filters see only traffic to www.google.com, while the actual destination is hidden inside the relay chain. Traffic Flow --- Installation If PyPI is blocked: --- Full Setup Guide Step 1: Deploy the Cloudflare Worker 1. Log in to Cloudflare Dashboard 2. Navigate to Compute > Workers & Pages 3. Click Create Application → Start with Hello World → Deploy 4. Click Edit code, delete all default code 5. Paste the contents of script/worker.js from the repo 6. Edit the worker URL constant: 7. Click Deploy — note your worker URL (e.g., your-worker-name.workers.dev) Step 2: Deploy the Google Apps Script Relay 1. Go to script.google.com and create a New project 2. Delete all default code 3. Paste the contents of script/Code.gs from the repo 4. Edit these two constants at the top: 5. Click Deploy → New deployment Type: Web app Execute as: Me Who has access: Anyone 6. Click Deploy and copy the Deployment ID (long random string like AKfycb...) Step 3: Configure config.json Edit config.json: Field Description --- --- mode Always "appsscript" for GAS relay googleip IP of Google's infrastructure for fronting frontdomain Domain shown to DPI (www.google.com) scriptid Your GAS Deployment ID from Step 2 authkey Must match AUTHKEY in Code.gs listenhost Local bind address (keep 127.0.0.1) listenport HTTP proxy port (default 8085) socks5enabled Enable SOCKS5 proxy on socks5port socks5port SOCKS5 proxy port (default 1080) loglevel DEBUG, INFO, WARNING, ERROR verifyssl Verify SSL certs; set false to skip Step 4: Run the Proxy Linux/macOS: Windows: Expected output: --- Using the Proxy Browser via FoxyProxy Install FoxyProxy: Chrome: Chrome Web Store Firefox: Firefox Add-ons Configure FoxyProxy: Proxy Type: HTTP or SOCKS5 Host: 1 …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/mhr-cfw-domain-fronting-relay