Skip to content

Add Hulios to Security projects - #160

Open
ghaziwali wants to merge 1 commit into
qmonnet:mainfrom
ghaziwali:main
Open

ghaziwali wants to merge 1 commit into
qmonnet:mainfrom
ghaziwali:main

Conversation

@ghaziwali

Copy link
Copy Markdown

Hi ,
I would like to submit Hulios to the Security section of the awesome-ebpf list.

* **Project Link:** https://github.com/ghaziwali/Hulios
* **Suggested Entry:**

* [Hulios](https://github.com/ghaziwali/Hulios) — An eBPF-powered, zero-leak transparent Tor gateway for Linux that secures outbound network traffic using Cgroup v2 socket hooks and LSM raw socket blockers.

### What does the project do?

Hulios is a transparent Tor gateway daemon written in Rust. It utilizes eBPF programs for two main tasks:
1. Cgroup v2 Socket Hooks: Attaches to the root cgroup to automatically mark (fwmark) and redirect outgoing TCP and DNS traffic into an unprivileged userspace Arti instance without modifying global system routes.
2. LSM Raw Socket Blocker: Uses BPF LSM hooks to reject AF_PACKET raw socket instantiation for non-privileged processes, shutting down a common route for cleartext packet leaks.

It follows strict privilege separation (spins up kernel hooks as root, then drops execution down to nobody within a strict seccomp sandbox).

Thank you for maintaining this list!

Added a new entry for Hulios, an eBPF-powered Tor gateway.
@ghaziwali
ghaziwali requested a review from qmonnet as a code owner July 29, 2026 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant