#networking

34 pages search “networking” ↳ all tags

Wiki 19

  • A tech addict's travel setup Alexander Fortin carries a home network in a suitcase - an OpenWrt travel router, Ethernet switch, mini PC server, Sonos audio routing and WireGuard
  • asciimoth/ygg (Yggdrasil fork) Fork of yggdrasil-go separating the library (ygglib) from the daemon (yggd) and adding an embedded userspace TCP/IP stack for in-process networking
  • bora.sh Bora Tanrıkulu's personal blog at bora.sh — short systems-engineering write-ups in the style of "I built X, here's the gnarly platform-specific bit"
  • Bypassing DPI with eBPF sock_ops Bora Tanrıkulu builds gecit — eBPF sock_ops on Linux for in-kernel SNI desync, gVisor + TUN as the "tiny VPN" fallback on macOS/Windows
  • Domain Fronting Hiding the real destination of an HTTPS request behind a different, high-reputation SNI
  • eBPF sock_ops Linux's per-cgroup BPF hook into the kernel TCP socket lifecycle — fires at SYN-sent, established, retransmit, and other transitions
  • Loading... [13 kB] Why downloads stall at 13 kB: TCP slow start and the initial congestion window
  • macOS TCP Time Bomb: 49-Day Kernel Overflow XNU kernel's 32-bit tcp_now overflows after 49.7 days, freezing TIME_WAIT and killing TCP
  • Serverless Relay Transport Using a cloud provider's free-tier serverless runtime (Apps Script, Workers, Cloud Run) as the exit hop for a circumvention proxy
  • sing-box Universal proxy platform in Go — the core underneath many modern circumvention clients
  • SSH port forwarding The four shapes of SSH tunneling — local (-L), remote (-R), dynamic SOCKS (-D), and jumphost (-J) — and which network shape each one solves
  • SSH Port Forwarding Cheatsheet (Graham Helton) Red-team-flavored walkthrough of SSH's -L/-R/-D/-J/-A/-g/-t flags, the ~? runtime console, and the config-file Match keyword
  • TCP Congestion Control How TCP throttles sending speed to prevent network collapse, and why the first RTT is ~13 kB
  • TLS Desync via Fake ClientHello Send a low-TTL fake ClientHello with a benign SNI before the real one, so the DPI logs the wrong hostname and waves the connection through
  • Turning an e-reader into a network printer Nishant Joshi makes an Xteink X3 show up in the macOS print dialog by speaking IPP, and fits a 300 dpi page into 400 KB of RAM
  • Whitelist Internet Blocking Default-deny national filtering where only explicitly approved destinations resolve
  • Xray-core VLESS proxy setup tutorial Step-by-step VLESS proxy setup with Xray-core: server config, TLS certs, clients
  • Yggdrasil Network Experimental overlay IPv6 mesh network where each node's address is derived from its public key; routing is location-independent and decentralized
  • Yggdrasil Network as an Embedded Go Library asciimoth's tutorial on embedding Yggdrasil mesh networking in Go apps via their fork — Core + VTun + transports + autopeering, no daemon required

Toolbox 14

  • 3x-ui Web panel for running an Xray-core proxy server with per-client quotas and subscription links
  • AmneziaWG Architect Browser-based generator for AmneziaWG obfuscation parameters across 9 protocol mimicry profiles
  • Freenet (Locutus) Rust rewrite of Freenet as a small-world peer ring hosting decentralized apps in the browser
  • gecit System-wide DPI bypass that injects fake TLS ClientHellos from eBPF, no tunnel or remote server
  • iroh Rust library for QUIC connections dialed by public key, with hole-punching and relay fallback
  • Little Snitch for Linux Linux port of the per-app network monitor — eBPF connection tracking with a web UI for blocking
  • mihomo (MetaCubeX) Rule-based proxy router forked from Clash, with TUN mode, DNS and most modern proxy protocols
  • MTproxy-reanimation nftables SYN limiter and server-side TCP desync for Telemt MTProto proxies, driven from one bash menu
  • Pion Handoff Starts a WebRTC session in the browser, then moves the real media connection to a Go backend
  • ratatoskr Embeds a Yggdrasil mesh node in a Golang process with a gVisor userspace stack — no TUN, no root
  • russia-v2ray-rules-dat Auto-generated geoip/geosite routing files of Russian-blocked domains and IPs, rebuilt every 6h
  • vpn-configs-for-russia Hourly auto-tested free VPN subscriptions split by Russia's black/white blocking regimes
  • wirez Routes any Linux program's TCP/UDP through a SOCKS5 proxy using rootless namespaces, not LD_PRELOAD
  • XKeen Transparent Xray/mihomo proxy for Keenetic routers, proxying the whole LAN without per-device apps

Books 1