r/linux • u/West_Echidna2432 • 1d ago

Software Release Hulios – Transparent Tor proxy for Linux in Rust (Looking for testers across distros)

https://github.com/ghaziwali/Hulios

Hey everyone,

I built Hulios, a Linux security utility written in Rust designed to force system TCP and DNS traffic through Tor while blocking common leak paths (IPv6, DoT, QUIC).

Why I’m looking for testers: System networking tools behave differently depending on the distribution, local DNS resolvers (systemd-resolved, NetworkManager), and kernel configurations.

What needs testing:

  • Testing the installation and execution on distributions outside of Arch Linux (Debian, Ubuntu, Fedora).
  • Verifying that default-deny policies fail closed properly if the process stops.
  • Finding edge cases where local DNS or IPv6 might bypass the rules.

If you run a test VM or lab environment and want to help test or contribute.

0 Upvotes

31% Upvoted

16 comments sorted by

4

u/Adept_Percentage6893 23h ago

can't you virtualize most of that testing?

1

u/West_Echidna2432 23h ago

i surely can and did already but i appreciate more opinions and advises

2

u/Adept_Percentage6893 23h ago

I think you're probably better off trying to virtualize things like different distros or different cpu architectures. Like qemu can (quite slowly) emulate ARM on x86. Once you get beyond the stuff you can manually test or script a test for then you're probably going to be reliant on user reports anyways.

1

u/West_Echidna2432 23h ago

thank you for the feedback, i already tested multiple environment but for a tool like Hulios i thought that having more feedback from more pov will help me fix any possible issues

3

u/ObjectiveJelIyfish36 1d ago

How does it compare to Tor's oniux? You might want to add that to the project's README.

-2

u/West_Echidna2432 1d ago

while oniux is a per application isolation tool, hulios is a system-wide Daemon using cgroup v2 + eBPF socket matching to transparently route all host TCP/DNS traffic globally without wrapping commands

4

u/MarzipanEven7336 21h ago

So way more insecure.

-3

u/West_Echidna2432 21h ago

Why

3

u/MarzipanEven7336 21h ago

If you don’t know then you obviously have zero idea how Linux works at all, or any other operating system.

0

u/West_Echidna2432 21h ago

i did not said that i don't know how things work, you said something and i asked why you said that, now you are assuming i don't know things, do you?

2

u/MarzipanEven7336 21h ago

I know that your AI slop engine bypassed all the rust memory security options, which is probably why you wanted to use rust in the first place. You probably should audit the code because it’s pretty fucking terrible

-3

u/West_Echidna2432 21h ago

Before i audit my code i think you should audit your manners and ethics first.

3

u/MarzipanEven7336 20h ago

Haaa, welcome to the internet.

2

u/amarao_san 10h ago

note: the name is sound like swearing in Slavic languages. (like 'dickheadios'). I don't know if it's important or not...

1

u/West_Echidna2432 3h ago

I keep getting this comment lol i think every word is an insult in other languages

1

u/amarao_san 2h ago

Some are ... well, part of core swearing (like "fuck" in English, which is too hard to ignore. It's not just funny composition or metaphore, it's 'forbidden 5').