Dev tools · alternatives · 2026
24 alternatives to Aroma: Every TCP Proxy Is Detectable with RTT Fingerprinting
TL;DR explanation (go to https://github.com/Sakura-sx/Aroma?tab=readme-ov-file#tldr-e... if you want the formatted version) This is done by measuring the minimum TCP RTT (client.socket.tcpi_min_rtt) seen and the smoothed TCP RTT (client.socket.tcpi_rtt). I am getting this data by using Fastly Custom VCL, they get this data from the Linux kernel (struct tcp_info -> tcpi_min_rtt and tcpi_rtt). I am using Fastly for the Demo since they have PoPs all around the world and they expose TCP socket data to me. The score is calculated by doing tcpi_min_rtt/tcpi_rtt. It's…
Aroma is a detection tool that identifies TCP proxies by analyzing round-trip time fingerprints. It measures minimum and smoothed TCP RTT values from the Linux kernel using Fastly's Custom VCL to calculate a ratio… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1TY
Hi HN, Some misbehaving networks drop WireGuard packets either by accident or on purpose. Commonly the latter is done with simple DPI rules that block the handshake initiation [1], but it could be applied to other message types as well. We thought it would be great if there was tool for folks to use as a quick litmus test to see if this happening for them, without having to configure a client to send data through a random, functional WireGuard tunnel to an untrusted remote host. So we built probe.sh. How it works: - The probe.sh web app is an Elixir Phoenix app that spawns a few gen_udp…
2024 · probe.sh · its alternatives →
- 2
Check whether your public IP has been observed participating in a residential proxy network. A free tool powered by Spur Intelligence.
Sep 2026 · haveibeenproxied.com · its alternatives →
- 3
A fast SOCKS5 proxy that tunnels your traffic through what looks like normal SMTP email, bypassing Deep Packet Inspection firewalls. How it works: - Client runs a local SOCKS5 proxy (127.0.0.1:1080) - Traffic is sent to server disguised as SMTP (EHLO, STARTTLS, AUTH) - DPI sees legitimate email session, not a VPN/proxy Features: - One-liner install on any Linux VPS - Multi-user with per-user secrets and IP whitelists - Auto-generated client packages (just double-click to run) - Auto-reconnect on connection loss - Works with any app that supports SOCKS5 Tech: Python/asyncio, TLS…
Jan 2026 · github.com · its alternatives →
- 4
Hi everyone, I recently published a small open-source project. It’s a minimal network packet analyzer written in Go — designed more like a learning toy than a replacement for Wireshark. It currently supports parsing basic protocols like TLS, DNS, and HTTP, and includes a tiny fuzzing engine to test payload responses. You can inspect raw packet content directly from the terminal. The output is colored for readability, and the code structure is kept simple and clear. The entire program is very small — just about 400 lines of Go code. I know it’s not anywhere near Wireshark’s level, and I still…
2025 · github.com · its alternatives →
- 5
Hi HN, I'm Tyler Flint, one of the creators of qtap. For a while now, my team and I at Qpoint.io have been grappling with the challenge of understanding what's actually happening inside the encrypted traffic leaving our production systems. Modern apps rely heavily on third-party APIs (think payment processors, data providers, etc.), but once TLS kicks in, figuring out exactly what data is being sent, identifying PII exposure, or debugging integration issues becomes incredibly difficult without resorting to complex and often brittle solutions. Traditional approaches like forward proxies…
2025 · github.com · its alternatives →
- 6SA
I've frequently found myself using [nvitop](https://github.com/XuehaiPan/nvitop) to diagnose GPU/CPU contention issues. The two best things about it are: - It's easy to install if I can access pip in the container - It makes a compelling screenshot (which helps me communicate with coworkers.) With those two lessons in mind: Here is Sping! Purpose: Help observe and diagnose latency issues at layer 4+ (TCP/HTTP/HTTPS) Two good things about it: - It's easy to install if you have pip. (Available at…
2025 · dseltzer.gitlab.io · its alternatives →
- 7
An HTTP/HTTPS intercept proxy written in Go. Contribute to rhaidiz/broxy development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 8
🎥 Proxy livestreams from websockets to external RTMP endpoints. - chuabingquan/pxy
2020 · github.com · its alternatives →
- 9
the tcpkit was designed to make network packets programable with Lua script - git-hulk/tcpkit
2018 · github.com · its alternatives →
- 10
Hi HN! I built RustNet, a Terminal UI based network monitor written in Rust that shows real-time connections with process identification and protocol detection. What may make it interesting: • Deep packet inspection for HTTP, HTTPS/TLS (with SNI), DNS, and QUIC protocol detection • Process identification using eBPF on Linux (experimental) and PKTAP on macOS which does also catch short-lived processes that polling procfs or lsof would miss • Multi-threaded packet processing with lock-free data structures for the UI • Cross-platform (Linux, macOS, Windows but process identification so far…
2025 · github.com · its alternatives →
- 11
dish is a lightweight, 0 dependency monitoring tool in the form of a small binary executable. Upon execution, it checks the provided sockets (which can be provided in a JSON file or served by a remote JSON API endpoint). The results of the check are then reported to the configured channels. It started as a learning project and ended up proving quite handy. Me and my friend have been using it to monitor our services for the last 3 years. We have refactored the codebase to be a bit more presentable recently and thought we'd share on here! The currently supported channels include: - Telegram -…
2025 · github.com · its alternatives →
- 12
Spanly▲77Hi HN, I'm Tim, solo founder of Spanly (https://spanly.com). I spent the last year working on MCP gateways, and debugging them with nothing better than HTTP-level APM was painful. Spanly runs its own MCP server and monitors it with itself, so I've been the first user of everything below. Spanly is observability for MCP servers, the protocol that lets agents like Claude and Cursor call your product's tools. It's a sidecar proxy, so it works with any language and requires zero code changes. Live demo (no signup): https://app.spanly.com/share/demo Sidecar source…
Jun 2026 · spanly.com · its alternatives →
- 13PL
Hey folks! Shahar and Tal from Keep (https://www.keephq.dev) here! For the last few weeks we’ve been building Peeng and can now share our beta with you: https://www.peeng.sh. Peeng is the easiest and quickest “heartbeat” architecture we could think of. Just pick a subdomain (e.g. x.peeng.sh), configure an interval, an endpoint, and a payload, and hit that subdomain every <X (interval) seconds — If you won’t, Peeng will send an HTTP POST request to your configured endpoint. It’s Pingdom/Cronitor/heartbeat.sh free alternative (but the other way around and A LOT…
2023 · peeng.sh · its alternatives →
- 14
- 15
I found hping3 and nmap's nping to be far too slow in terms of sending individual, bare-minimum (40-byte) TCP SYN packets; other than inefficient socket I/O, they were also attempting to do far too much unnecessary processing in what should have otherwise been a tight execution loop. Furthermore, none of them were able to handle CIDR notations (i.e., a range of IP addresses) as their source IP parameter. Being intended for embedded devices (e.g., low-power MIPS/Arm-based routers), Blitzping only depends on standard POSIX headers and C11's libc (whether musl or gnu). To that end,…
2024 · github.com · its alternatives →
- 16
Back in March we first launched Scarf Gateway with support for Docker/OCI containers.
2021 · about.scarf.sh · its alternatives →
- 17
Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal. - kerlenton/mcpsnoop
Jul 2026 · github.com · its alternatives →
- 18
IPDetective collects data from about 60+ different sources such as official cloud provider endpoints and public VPN/Proxy/Tor/Bot net lists. Then aggregates this data into a fast and easy to use API that can be integrated into applications or scripts easily. IPDetective started as a hobby project for my other hobby projects :) and I decided to wrap a simple website around and offer it as a service. Let me know what your thoughts, if you find value in this service or if you have any feature requests.
2022 · ipdetective.io · its alternatives →
- 19
Detect VPNs, Proxy Servers, Tor and Hosting Providers
2020 · ipinfo.io · its alternatives →
- 20CC
If you had to build a context window manager in 24h, would you stick to the existing model or come up with something better? Here's what I did: 1. Built a proxy that intercepts Codex's calls to OpenAI and rewrites them on the fly. 2. Replayed 3,807 rounds of SWE-bench Verified traces through it: avg prompt 44k → 6k tokens (-87%). 3. Posted it to HN to get the next reduction applied to my confidence interval — starting with the inevitable "How about accuracy?" npx -y pando-proxy · github.com/human-software-us/pando-proxy
Apr 2026 · npmjs.com · its alternatives →
- 21
This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…
2025 · github.com · its alternatives →
- 22
Hey everyone. I built an MTProto proxy for Telegram aimed at bypassing active DPI censorship like the Russian TSPU. I chose Zig because it's perfect for writing fast network daemons and makes it incredibly easy to port low-level C bypass techniques like TCP desync and packet fragmentation. Would love to get some feedback or contributors!
Apr 2026 · github.com · its alternatives →
- 23AT
2021 · zmedley.com · its alternatives →
- 24
2022 · github.com · its alternatives →
Also compare
- Test your WireGuard connectivity and see global stats, no client needed alternatives
- Check if your IP has appeared in a residential proxy network alternatives
- SMTP Tunnel – A SOCKS5 proxy disguised as email traffic to bypass DPI alternatives
- A toy version of Wireshark (student project) alternatives
- Using eBPF to see through encryption without a proxy alternatives
- Sping – An HTTP/TCP latency tool that's easy on the eye alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →