Use Shadowsocks as Transparent Proxy (like GFW doesn't exist)
this transparent proxy depends on iptables, which means generally you can only use it on Linux
what you are getting
an always-on proxy that redirects all TCP/UDP traffic to your Shadowsocks proxy while bypassing a list of IP ranges a clean connection to foreign DNS server, bye bye DNS …
more ...