July 28, 2026
Tor? More like war in the comments
Hulios: An eBPF-powered, transparent Tor gateway for Linux
A privacy tool promises leak-proof browsing, but commenters are already screaming about kernel chaos
TLDR: Hulios is a new Linux tool that tries to force all internet traffic through Tor and block leaks, even if it crashes. Commenters were split between admiring the ambition and freaking out that putting this much power near the system core could go very, very wrong.
A new Linux privacy project called Hulios is pitching itself as the ultra-serious answer to accidental internet leaks: it pushes your web traffic and domain lookups through Tor—the network people use to hide where they’re connecting from—while also slamming the door shut if the software crashes. In plain English, it’s trying to make sure your computer doesn’t suddenly blurt out your real internet identity. The developer’s pitch is all hard hats and warning signs: strict permissions, a built-in emergency cut-off, and a giant disclaimer basically shouting that privacy software is not magic invisibility.
But the real action is in the comments, where the mood instantly swerved from impressed to "absolutely not on my machine". One of the strongest reactions was pure dread: if this thing sits so close to the heart of Linux, what happens if there’s a security flaw? One commenter didn’t just worry—they detonated the thread with a wildly graphic line about their workstation getting roasted by a bug. Another user praised the project’s very online vibe, thanking the creator for the "load-bearing emojis," which feels like the most 2020s open-source compliment imaginable. And then, naturally, someone dropped a mysterious YouTube link, because no internet debate is complete until a random video enters the chat like a smoke bomb.
So the community verdict so far? Cool idea, terrifying power, immaculate chaos.
Key Points
- •Hulios is presented as an eBPF-powered transparent Tor gateway for Linux that routes outbound TCP traffic and DNS through embedded Arti and a local Hickory-based resolver.
- •The article says Hulios uses kernel socket-level controls, cgroup hooks, and policy routing to create leak-resistant traffic boundaries without editing resolv.conf or using external firewall daemons.
- •Its security model includes a root supervisor that installs eBPF and routing rules, an unprivileged worker running as nobody under seccomp, and a fail-secure kill-switch based on blackhole routing in table 100.
- •The software also uses an LSM eBPF hook to block raw AF_PACKET socket creation, and it requires Linux kernel 5.10+ with BPF syscall, BPF LSM, and cgroups v2 enabled.
- •The article provides installation paths via the Arch User Repository or source build with Rust, plus commands for start, status, diagnose, recover, stop, and configuration through /etc/hulios/config.toml.