add tcp_service to by pass keyword filtering
make tcp service working for hotspot
inject poison ack to gfw buffer