Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support SOCKS5 transport #655

Open
sanity opened this issue May 30, 2023 · 2 comments
Open

Support SOCKS5 transport #655

sanity opened this issue May 30, 2023 · 2 comments
Labels
C-feature Category: New feature or request C-proposal Category: A proposal seeking feedback help wanted Extra attention is needed

Comments

@sanity
Copy link
Collaborator

sanity commented May 30, 2023

Supporting SOCKS5 as an alternate transport would be useful for people who wish to use VPNs with Locutus.

There is some code to add SOCKS5 support to libp2p, but it is unmaintained and under the GPL which we can't use. Still, it demonstrates that it's possible and not too difficult.

@sanity sanity added C-feature Category: New feature or request help wanted Extra attention is needed C-proposal Category: A proposal seeking feedback labels May 30, 2023
@planetoryd
Copy link

planetoryd commented May 30, 2023

  1. Application-level socks5 proxying is a poor security practice, generally, because the user is subject to DNS leaks and faulty configuration that lead to anonymity breach.
  2. It can be a bonus if implemented properly. Kernel-level routing has better security but that forces locutus to use proxy all the time.

And the user probably shouldn't be mixing normal transports and socks5 transports if he actually wants anonymity, since adversaries may correlate traffic.

There is an easy way of making Locutus anonymous, to run it behind Lokinet/Nym, but you need it support lokinet addresses or you will burden exit nodes. Whether you like it or not, it's a realistic way of achieving anonymity in the near future

@sanity
Copy link
Collaborator Author

sanity commented May 30, 2023

SOCKS5 is just an option for people who really want to run over their favorite proxy or VPN, it isn't a practice I would recommend for anonymity.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
C-feature Category: New feature or request C-proposal Category: A proposal seeking feedback help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

2 participants