Hey everyone,
I got tired of brittle transparent Tor proxies that rely on messy iptables
scripts and break whenever DNS configurations change. So I built Hulios.
Why is it different?
• No iptables hackery: It uses Cgroup v2 eBPF socket hooks
(sys_connect/sys_sendmsg) to mark and route traffic directly at the kernel
boundary.
• Fail-Secure Kill-Switch: Routing rules are locked in kernel table blackholes.
If the userspace daemon crashes or gets killed (SIGKILL), your traffic drops
instantly. Zero cleartext leaks.
• LSM Raw Socket Blocker: Uses an LSM BPF hook to block applications from
creating raw sockets (AF_PACKET) to bypass routing.
• Hardened Sandbox: Elevates privileges only at startup, then immediately drops
to user nobody and enters a strict seccomp sandbox.
• Built-in DNS Guard: Runs an embedded Hickory DNS resolver with automated DNS-
rebinding protection.
Let me know what you think! i appreciate your feedback and contributions
this is my first tor related project.
URL: GitHub - ghaziwali/Hulios: A Rust-based transparent Tor proxy that routes all system traffic through the Tor network enhanced security, proper DNS isolation, and modern Linux compatibility. · GitHub