Skip to content

Getting started

Huginn Proxy is a reverse proxy built on Tokio, Hyper, and Rustls. It passively fingerprints clients (TLS JA4, HTTP/2 Akamai-style, optional TCP SYN via eBPF) and injects trusted x-huginn-net-* headers for backends. Fingerprinting primitives come from Huginn Net. TCP SYN fingerprinting is implemented via an XDP eBPF program using Aya.

Inspired by production-grade proxies like Pingora, Sozu, and rust-rpxy.

  • Obtain a binary or image: use the master branch in the repository, or follow Deployment for containers and images.
  • Linux (kernel ≥ 5.11) is required for TCP SYN / eBPF fingerprinting; TLS and HTTP/2 fingerprints work on other platforms when eBPF is disabled.