From 33dce70177fc9c0519f36610cbb21c1a26057eda Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
<41898282+github-actions[bot]@users.noreply.github.com>
Date: Sun, 25 Oct 2026 15:55:05 +0000
Subject: [PATCH] Update HTML documentation from man pages
---
doc/html/man5/3proxy.cfg.5.html | 8 ++++++++
doc/html/man8/tlspr.8.html | 11 ++++++-----
2 files changed, 14 insertions(+), 5 deletions(-)
diff --git a/doc/html/man5/3proxy.cfg.5.html b/doc/html/man5/3proxy.cfg.5.html
index 67fc396..1d6f72c 100644
--- a/doc/html/man5/3proxy.cfg.5.html
+++ b/doc/html/man5/3proxy.cfg.5.html
@@ -245,6 +245,14 @@ delay GRACE_DELAY milliseconds before polling if average
polling size is below GRACE_TRAFF bytes and GRACE_NUM read
operations in a single direction are detected within 1
second. Useful to minimize polling
+-B (for TCP services) split the TLS ClientHello across
+two TCP segments in the middle of the server name (SNI) when
+it is passed through tlspr, as with parent ... tls
+0.0.0.0 0: some DPI systems looking for blocked host
+names do not reassemble it. TCP_NODELAY, set by default,
+must not be turned off, or the kernel may join the segments
+again. In builds without splice() -s does the same.
+
-s
(for admin) secure, allow only secure operations, currently
only traffic counters view without ability to reset.
diff --git a/doc/html/man8/tlspr.8.html b/doc/html/man8/tlspr.8.html
index fd57327..03782ff 100644
--- a/doc/html/man8/tlspr.8.html
+++ b/doc/html/man8/tlspr.8.html
@@ -230,15 +230,16 @@ a certificate (not compatible with TLS 1.3)
- -s |
+-B
|
- Split the TLS Client HELLO packet across multiple TCP
-segments to make SNI-based DPI detection harder. An optional
-numeric value can follow (e.g. -s1) to control the
-splitting behaviour. |
+Split the TLS Client HELLO packet across two TCP
+segments, in the middle of the SNI, to make SNI-based DPI
+detection harder. In builds without splice() -s does
+the same; with splice() (Linux) -s is splice, see
+3proxy.cfg(5).
-Ximap | -Xpop3 |