Getting started
Huginn Proxy is a reverse proxy built on Tokio, Hyper, and Rustls. It passively fingerprints clients (TLS JA4, HTTP/2 Akamai-style, optional TCP SYN via eBPF) and injects trusted x-huginn-net-* headers for backends. Fingerprinting primitives come from Huginn Net. TCP SYN fingerprinting is implemented via an XDP eBPF program using Aya.
Inspired by production-grade proxies like Pingora, Sozu, and rust-rpxy.
Prerequisites
Section titled “Prerequisites”- Obtain a binary or image: use the
masterbranch in the repository, or follow Deployment for containers and images. - Linux (kernel ≥ 5.11) is required for TCP SYN / eBPF fingerprinting; TLS and HTTP/2 fingerprints work on other platforms when eBPF is disabled.