OpenSnitch – A Linux clone of the Little Snitch application firewall

Re:OpenSnitch – A Linux clone of the Little Snitch applicati... by evilsocket on Wednesday May 03, 2017 @09:21AM (#14255388)

OpenSnitch author here ... although performances are not a big deal here because only conntrack packets are intercepted, the project will move to a C++ implementation once the current Python prototype/PoC will be complete and will prove that what I want to do is 100% doable on GNU/Linux :)

[ Parent | on HN ]

Re:OpenSnitch – A Linux clone of the Little Snitch applicati... by sandGorgon on Wednesday May 03, 2017 @10:30AM (#14255941)

I would say that golang is good enough. But if you are interested , you could go for Rust. Multiple teams have built extremely high performance network manipulation tools in Rust - like linkerd-tcp .

Unless you were planning to use Ragel.

[ Parent | on HN ]

Re:OpenSnitch – A Linux clone of the Little Snitch applicati... by evilsocket on Wednesday May 03, 2017 @10:32AM (#14255963)

As I said, it'll be in C++, Go is great, Rust too, but I just can't get used to their syntax :D

[ Parent | on HN ]

Re:OpenSnitch – A Linux clone of the Little Snitch applicati... by cyphar on Wednesday May 03, 2017 @11:53AM (#14256836)

Once I saw OpenSnitch I decided to write my own in Rust (mostly as a learning experience for myself)[1] -- it's still obviously WIP as it doesn't even filter packets yet! My intention is to make it have a remote API so that policy decisions aren't done in the daemon but are done in swappable clients.

[1]: https://github.com/cyphar/whistled

[ Parent | on HN ]

Re:OpenSnitch – A Linux clone of the Little Snitch applicati... by steveklabnik on Wednesday May 03, 2017 @12:22PM (#14257214)

I thought the Ragel stuff was back in.

[ Parent | on HN ]

Re:OpenSnitch – A Linux clone of the Little Snitch applicati... by sandGorgon on Wednesday May 03, 2017 @01:16PM (#14257873)

I hoped so too. I think someone is forking it, but AFAIK it's c or ASM only.

[ Parent | on HN ]