Cloudflare Worker — transparent WebSocket-to-TCP proxy.
| Outbound socket | cloudflare:sockets (plain TCP) |
| allowHalfOpen | true (required for TLS passthrough) |
| Handshake frame | JSON { host, port } |
| Data frames | Binary, serialised write queue |
| Client local port | 28671 (SOCKS5) |