[Feature] DPI Circumvention to Bypass Throttling

[worstperson]

I came across something interesting, DPI circumvention tools made for oppressive regimes are also very effective for mobile carrier DPI. I'm looking at the Russian tool zapret, as it's written in C and targets routers.
https://github.com/bol-van/zapret/blob/master/docs/readme.eng.txt
The approach I show here will work for users that use VPNHotspot without a VPN(provisioning bypass?), though it is also easy to run the server in socks mode and have AdGuard pass data through it.

The specific tool I tested was tpws. It is implemented as a transparent or socks proxy, so it's easy to work with.
I changed CFLAGS -O3 to -O2 to fix a segfault, copied android-ifaddrs, and compiled as usual:
arm

user:~/zapret/tpws$ export PATH=$PATH:$HOME/android-tools/arm-linux-androideabi-vanilla/android-21/bin
user:~/zapret/tpws$ CC=arm-linux-androideabi-gcc CXX=arm-linux-androideabi-g++ AR=arm-linux-androideabi-ar RANLIB=arm-linux-androideabi-ranlib make

aarch64

user:~/zapret/tpws$ export PATH=$PATH:$HOME/android-tools/aarch64-linux-android-vanilla/android-21/bin
user:~/zapret/tpws$ CC=aarch64-linux-android-gcc CXX=aarch64-linux-android-g++ AR=aarch64-linux-android-ar RANLIB=aarch64-linux-android-ranlib make

The required NAT redirection rules:

iptables -t nat -I PREROUTING -i rndis0 -p tcp --dport 80 -j DNAT --to 192.168.42.129:8123
iptables -t nat -I PREROUTING -i rndis0 -p tcp --dport 443 -j DNAT --to 192.168.42.129:8123

To start start the service as root:
./tpws --bind-addr=192.168.42.129 --port=8123 --split-pos=3 --uid=1:3003

The result is uncapped fast.com results, confirmed working on T-Mobile and AT&T.