You could straight up connect to the destination (over TCP) from Cloudflare without needing relays; a project I wrote demonstrates TCP over HTTP (for Deno Deploy) and TCP over WebSockets (for Workers): https://github.com/serverless-proxy/serverless-proxy

Proxying projects utilising HTTP/TLS are popular in the anti-censorship community (discussion board: https://github.com/net4people/bbs) and there are many variants of it; ex:

- KCP (over UDP): https://github.com/xtaci/kcp-go

- Bepass: https://github.com/bepass-org/bepass-worker

▲

doxx9999 9 months ago | parent [-]

Yeah, but websockets are limited. I wrote this to tunnel VPNs over this and have full IP connectivity... which does work. A lot of users of the application I have talked with are from China and Iran. Seems to work well.

	▲	ignoramous 9 months ago \| parent [-]
		> ... from China and Iran. Seems to work well. Apparently Cloudflare, since a few weeks ago, has started flagging traffic bound to/from proxies as DDoS vectors: https://github.com/net4people/bbs/issues/429