Hulios是一个eBPF驱动的透明Tor VPN网关，通过在内核套接字级别重定向TCP流量和DNS查询来保护用户的出站网络流量[1]。该项目采用权限分离、沙箱隔离和故障安全机制等多层安全设计[1]。
使用该工具需要Linux内核5.10或更高版本，并且需启用CONFIG_BPF_SYSCALL、CONFIG_BPF_LSM和CONFIG_CGROUPS_V2配置[1]。工作进程以nobody用户权限运行，通过限制性seccomp系统调用过滤进行隔离[1]。Hulios在Arch Linux上可通过'paru -S hulios-git'或'yay -S hulios-git'命令安装[1]。
该项目提供了故障安全机制，确保进程崩溃或被强制关闭时，内核策略表中的黑洞路由仍保持活跃，防止IP泄露[1]。但需要注意的是，Hulios不保证完全匿名性，应配合官方Tor浏览器使用以增强隐私保护[1]。
Hulios is a Linux-based transparent Tor VPN gateway that leverages eBPF technology to redirect TCP traffic and DNS queries at the kernel socket level, thereby protecting users' outbound network traffic [1]. The tool implements multiple layers of security through privilege separation, sandboxing, and fail-safe mechanisms to ensure robust protection [1].
The project requires Linux kernel version 5.10 or higher with CONFIG_BPF_SYSCALL, CONFIG_BPF_LSM, and CONFIG_CGROUPS_V2 enabled [1]. Worker processes run under the nobody user account and are isolated using restrictive seccomp system call filtering [1]. On Arch Linux systems, users can install Hulios via package managers using either 'paru -S hulios-git' or 'yay -S hulios-git' [1]. The gateway features a fail-safe mechanism that keeps blackhole routes active in the kernel policy table even if the process crashes or is forcibly terminated, preventing IP leakage [1].
Despite these protections, the developers note that Hulios does not guarantee complete anonymity and recommend using it alongside the official Tor Browser for enhanced privacy [1].