r/Network

Because if not then it would not make any sense why my computer would trust another device if the pc is sending data to the real router.

I built a configurable HTTP MITM proxy in Rust focused on giving you full control over what an upstream connection looks like at the network level.

The main idea behind the project was that I didn't want another MITM proxy that simply tries to emulate Chrome, Firefox, or some other predefined browser. I wanted to be able to define the fingerprint myself - not just pick one of the profiles provided by a library.

A lot of existing solutions take the approach of providing ready-made browser fingerprints. That's convenient, but it also means that when a browser changes its TLS or HTTP/2 behavior, you're dependent on the library/project adding a new profile. I wanted the fingerprint to be configuration-driven instead, so the user can adjust individual parameters without waiting for a predefined browser profile.

The proxy currently gives control over several layers:

TLS: cipher suites, curves, signature algorithms, ALPN, GREASE, extension ordering, certificate compression, OCSP, SCT, session tickets, ALPS, ECH and other TLS parameters.

HTTP/2: SETTINGS values and ordering, flow-control windows, priority frames, pseudo-header ordering, HTTP header ordering and values.

HTTP/1.1: configurable upstream header ordering and rewriting.

TCP: SYN fingerprint rewriting through Linux NFQUEUE, including TTL, window size, MSS, window scale, DF and TCP option ordering.

Everything is driven by YAML profiles, and profiles can be overridden per domain based on SNI.

One of the things I specifically wanted to solve was keeping the different layers under the same configuration model. For example, the proxy negotiates TLS with the upstream server first and then uses the selected ALPN when setting up the browser-facing connection. HTTP/2 and TCP fingerprinting are configured for the same upstream connection as well.

The project is written in Rust using Tokio and BoringSSL via btls/tokio-btls. TCP fingerprinting currently requires Linux because it uses NFQUEUE/iptables.

The project is primarily about privacy, experimentation, and giving the user control over their own network behavior rather than trying to provide a fixed "browser impersonation" profile.

There is more detail in the repository, including separate documentation for the TLS, HTTP/2 and TCP layers, configuration examples, and implementation notes.

Feedback, especially from people who have worked with TLS/HTTP/2 fingerprinting, traffic analysis, or network privacy, would be very welcome.

Hello,

I am living in Germany and searching for a switch for my home. I have a dedicated server room, so noise is no consideration, but I have some requirements:

I need:
- L2 Management (VLANs)

- POE 

- PoE+ for at least 4 Ports. 

- 1 GB Networking

- 48 Ports (or 2x 24 Ports)

I also would greatly value reliability if that is a big consideration as I will often be away from home for extended periods due to work related reasons.

I found a deal for used JL357A's for 150€ each (48x 1GB) PoE+ with 370 W power budget. Is that a good deal?

If you have any other ideas, or listings that I could look at that would be great! I appreciate all help.

Title ^

Context:

The main Xfinity modem is on the first floor of the house, and the wifi signal can't reach the desired room on the second floor. There is, however, a coax cable (I assume the same one that allows the original modem to work?) running up through the floor to the second floor room, so I thought I could use this with another router. Plugged in a second router (Motorola MG7700) upstairs and I've been able to connect to it via my phone and change the default username/password and other settings. Not sure if it was correct, but I read that I would have to disable DHCP service to get this thing to work for what I'm trying to do. Did that, and now I can't connect to it anymore so I'll probably factory reset it at some point.

But yeah, can this actually be done, or is it not allowed with Comcast, etc.? Appreciate any insight y'all can give me. :)

PS: Running an Ethernet cable up the stairs, or through the walls with the other coax cable, isn't an option, unfortunately.