feat(smartproxy): Enhance description clarity and improve SNI handling with domain locking.

ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@push.rocks/smartproxy',
-  version: '3.16.9',
-  description: 'A robust and versatile proxy package designed to handle high workloads, offering features like SSL redirection, port proxying, WebSocket support, and customizable routing and authentication.'
+  version: '3.17.0',
+  description: 'A powerful proxy package that effectively handles high traffic, with features such as SSL/TLS support, port proxying, WebSocket handling, and dynamic routing with authentication options.'
 }

ts/classes.portproxy.ts

@@ -90,6 +90,7 @@ interface IConnectionRecord {
   outgoing: plugins.net.Socket | null;
   incomingStartTime: number;
   outgoingStartTime?: number;
+  lockedDomain?: string; // New field to lock this connection to the initial SNI
   connectionClosed: boolean;
   cleanupTimer?: NodeJS.Timeout; // Timer to force cleanup after max lifetime/inactivity
 }
@@ -366,7 +367,19 @@ export class PortProxy {
           socket.setTimeout(0);
           initialDataReceived = true;
           const serverName = extractSNI(chunk) || '';
+          // Lock the connection to the negotiated SNI.
+          connectionRecord.lockedDomain = serverName;
           console.log(`Received connection from ${remoteIP} with SNI: ${serverName}`);
+          // Add an extra data listener to check for a renegotiated ClientHello.
+          socket.on('data', (chunk: Buffer) => {
+            if (chunk.length > 0 && chunk.readUInt8(0) === 22) {
+              const newSNI = extractSNI(chunk);
+              if (newSNI && newSNI !== connectionRecord.lockedDomain) {
+                console.log(`Rehandshake detected with different SNI: ${newSNI} vs locked ${connectionRecord.lockedDomain}. Terminating connection.`);
+                cleanupOnce();
+              }
+            }
+          });
           setupConnection(serverName, chunk);
         });
       } else {