wireglass v0.2.1

See what the connection actually does.

Local-only Rust CLI for real, structured network measurements.

Features

• DNS: records, TTL, CAA, delegation and DNSSEC evidence
• TCP connection timing
• TLS handshake, ALPN, cipher and certificate metadata
• HTTP/2 requests and response headers
• HTTP/3 QUIC handshake verification
• UDP/STUN and UDP/QUIC diagnostics
• Structured JSON reports and explicit failure states

Downloads

• Linux x86_64: wireglass-linux-x64
• macOS ARM64: wireglass-macos-arm64
• Windows x86_64: wireglass-windows-x64.exe
• SHA256 checksums and license files included

Quick start

Download the binary for your platform from Assets.

Linux: chmod +x wireglass-linux-x64 && ./wireglass-linux-x64 https://example.com

Windows: ./wireglass-windows-x64.exe https://example.com

Android

Experimental Slint front-end. Engineering Preview, not a Play Store release.

Limitations

• DNSSEC chain-of-trust validation is not implemented.
• HTTP/3 request/response is not implemented; QUIC handshake is checked.
• STUN MESSAGE-INTEGRITY and FINGERPRINT are not validated.
• UDP timeout does not prove UDP is blocked.

Links

• Source: https://github.com/BTF-Kabir-2020/wireglass/tree/v0.2.1
• Documentation: https://github.com/BTF-Kabir-2020/wireglass/blob/v0.2.1/README.md

License: MIT OR Apache-2.0.

wireglass v0.2.0

fix: avoid Windows stack overflow in run (box async futures, raise ma…

wireglass v0.1.0

wireglass v0.1.0

See what the connection actually does. wireglass is a local-only Rust CLI that walks the real connection path to a URL — DNS → TCP → TLS (ALPN) → HTTP/2 → HTTP/3 — and reports each step as a directly measured, reproducible result.

Highlights

• DNS: A/AAAA/CAA, plus the NS/SOA delegation chain walked from the root toward the host zone, and raw DNSSEC DS/DNSKEY records with an honest status (unsigned, signed_unverified, delegation_signed_no_dnskey). Signatures are not cryptographically validated.
• TCP: connect timing, with --repeat N for timing dispersion.
• TLS: handshake with negotiated version / cipher / ALPN and certificate info.
• HTTP/2: a real request over the negotiated connection.
• HTTP/3 (QUIC): a real handshake probe that distinguishes advertised (Alt-Svc) from actually connected.
• Structured JSON report with per-stage ok / failed / not_attempted status and explicit errors instead of guesses.
• Self-contained HTML report (--html FILE) and offline re-render from a saved report (--render FILE [--out FILE]).
• Deterministic SVG report card (--card FILE, 1200×630) plus an interpretive score/grade/roast.

Install

• From source: cargo build --release → binary wireglass (Rust 1.85+, edition 2024).
• Or use a prebuilt binary below (Windows x64 / Linux x64 / macOS arm64).

Notes

• Local-only: no third-party services are called. cargo run --example quic_selfcheck proves QUIC on loopback without any network.
• Measure, never infer: every reported value comes from a real measurement; failures are labeled as failures with their error.