// the find
openlibrecommunity/olcrtc
olcrtc - implementation of bb22 using legal meet services to access web outside the whitelist
olcRTC tunnels TCP traffic over WebRTC by disguising it as a video call on legitimate meeting services (Jitsi, Yandex Telemost, WbStream). It's a censorship circumvention tool for networks that whitelist video conferencing but block general internet access. The encryption stack is XChaCha20-Poly1305 with smux multiplexing.
Four distinct transport modes (datachannel, vp8channel, seichannel, videochannel) let you trade off latency, reliability, and detectability depending on the network. The vp8channel transport uses KCP — an ARQ protocol over UDP — which is a thoughtful choice for video-channel disguise since real VP8 video is also loss-tolerant. Test coverage is serious: unit tests, integration tests, chaos tests, concurrency tests, soak tests, and e2e tests against real providers. Android support via gomobile with a companion proxy client that speaks the full zoo of circumvention protocols (vless, hysteria2, trojan, etc.) alongside olcrtc.
Beta status on a security-critical tool is a real concern — XChaCha20 is solid but the handshake and key exchange story isn't explained in the README; a pre-shared hex key from openssl rand is the entire key management story, which means no forward secrecy and manual key distribution. The three supported providers are all specific services that could be blocked or break their API at any time; Jitsi is the only truly self-hostable fallback. Podman is a hard dependency for the quick start, which is an unusual choice for a Go project that could just ship a single binary. The Russian-origin providers (Telemost, WbStream) are an odd default for a censorship tool — users in Russia may find them useful, but users elsewhere likely won't have those services whitelisted.