Gecit
DPI bypass using eBPF sock_ops, no proxy or VPN
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Want to reach these readers? Sponsor an issue.
HN · launched Apr 5, 2026 · 9 upvotes (top 45%) · 0 views
Niche: privacy and censorship circumvention tools · 94 launches, 7 in the last 7 days ▼ -50% · Explore this niche →
Category and tags
- Security
- Dev tools
- Developer
- Not AI
- Hobby / open-source project
Visit website ↗ Source listing ↗
More like this: all 94 launches in privacy and censorship circumvention tools →
Could you build this?
No Developing deep packet inspection bypass mechanisms using Linux kernel eBPF sock_ops requires specialized low-level networking, Linux kernel internals, and TCP/IP stack manipulation skills.
What it would actually take: The system requires writing C eBPF programs attached to sock_ops/sk_msg kernel hooks (using libbpf/Cilium) to intercept TCP handshakes and manipulate TCP window sizes, segmentation, or TLS Client Hello packets in-flight. The core difficulty lies in avoiding kernel panics, adhering strictly to the eBPF verifier's safety constraints, and correctly simulating TCP packet fragmentation to evade DPI middleboxes. This requires deep expertise in Linux kernel programming, network protocol security, and eBPF tooling.
Discussion
2 comments analyzed.
Concerns raised: More sophisticated DPI systems like China's GFW can do full TCP reassembly, Doesn't work against stateful/reassembly-capable DPI
Competitors
Other products that read as similar to this one : 750 launches clear the similarity bar, closest 8 shown.
Attention rank: #320 of 751 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 155 days after the earliest competitor.
- dpi-bypass · github · 2026-09-12 · 20 upvotes · similarity 0.56
- Poolnarc · hn · 2026-06-01 · 5 upvotes · similarity 0.51
- Erebus, A VPN client that runs rootless in user space · hn · 2026-06-03 · 60 upvotes · similarity 0.50
- Live, system-wide USB transfer sniffer in eBPF · hn · 2026-05-31 · 9 upvotes · similarity 0.50
- dorm-vpn-bypass · github · 2026-09-11 · 13 upvotes · similarity 0.50
- Bomfather, eBPF Runtime Security · hn · 2026-10-13 · 7 upvotes · similarity 0.49
- Fengard · github · 2026-10-09 · 34 upvotes · similarity 0.49
- Lightweight system monitor for Linux VPS written in Go · hn · 2026-08-25 · 63 upvotes · similarity 0.48
The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.