# bora.sh

Bora Tanrıkulu's personal blog at [bora.sh](https://bora.sh). Short, code-forward write-ups built around a single tool the author has shipped, with a strong "what each platform forces you to do differently" framing. The April 2026 [[bypassing-dpi-with-ebpf|gecit post]] reads like the canonical example of the format: one paragraph of motivation, then Linux / macOS / Windows sections that each begin with the kernel hook the platform does or doesn't give you.

## Ingested articles

- [[bypassing-dpi-with-ebpf]] (2026-04-26) — eBPF `sock_ops` for in-kernel SNI bypass on Linux, gVisor + TUN on macOS/Windows, and the platform gap that makes the second pair into "tiny VPNs"

## Author

Author of [`gecit`](https://github.com/boratanrikulu/gecit) (GPL-3.0 cross-platform DPI-bypass), [`gobee`](https://github.com/boratanrikulu/gobee) (Go-to-BPF-C transpiler, MIT — see [[toolbox/gobee]]), and [`bpfvet`](https://github.com/boratanrikulu/bpfvet) (BPF portability analyzer). Bora's published toolset is converging on the "writing eBPF programs in Go without writing C" stack.