Life & fun · alternatives · 2026
24 alternatives to Gecit – DPI bypass using eBPF sock_ops, no proxy or VPN
DPI bypass tool - eBPF on Linux, TUN on macOS/Windows. - boratanrikulu/gecit
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
Write your BPF programs in Go, not C. gobee transpiles a Go subset to BPF C and generates typed cilium/ebpf bindings. - boratanrikulu/gobee
May 2026 · github.com · its alternatives →
- 2
Credentials Dumper for Linux using eBPF. Contribute to citronneur/pamspy development by creating an account on GitHub.
2022 · github.com · its alternatives →
- 3
A fast SOCKS5 proxy that tunnels your traffic through what looks like normal SMTP email, bypassing Deep Packet Inspection firewalls. How it works: - Client runs a local SOCKS5 proxy (127.0.0.1:1080) - Traffic is sent to server disguised as SMTP (EHLO, STARTTLS, AUTH) - DPI sees legitimate email session, not a VPN/proxy Features: - One-liner install on any Linux VPS - Multi-user with per-user secrets and IP whitelists - Auto-generated client packages (just double-click to run) - Auto-reconnect on connection loss - Works with any app that supports SOCKS5 Tech: Python/asyncio, TLS…
Jan 2026 · github.com · its alternatives →
- 4
eBPF/XDP packet filtering for Linux. Contribute to boratanrikulu/durdur development by creating an account on GitHub.
2022 · github.com · its alternatives →
- 5
Hi HN, I'm Tyler Flint, one of the creators of qtap. For a while now, my team and I at Qpoint.io have been grappling with the challenge of understanding what's actually happening inside the encrypted traffic leaving our production systems. Modern apps rely heavily on third-party APIs (think payment processors, data providers, etc.), but once TLS kicks in, figuring out exactly what data is being sent, identifying PII exposure, or debugging integration issues becomes incredibly difficult without resorting to complex and often brittle solutions. Traditional approaches like forward proxies…
2025 · github.com · its alternatives →
- 6
Hi HN! I've been working on Bor, an open-source system for centralized Linux desktop management. Bor consists of a lightweight Go agent and a central server. Policies are streamed to clients over mTLS/gRPC in real time—no polling—and currently support Firefox, Chrome, KDE, dconf, polkit and package management, with more coming. Version 0.8 introduces several new policy types - Thunderbird, Microsoft Edge for Business and FirewallD zones, along with a number of improvements and fixes. I'd love feedback on the architecture, policy model, and whether this is something you'd consider for…
Aug 2026 · getbor.dev · its alternatives →
- 7
To power the firewalling for our agents so that they couldn't contact arbitrary services, I build netfence. It's like Envoy but for eBPF filters. It allows you to define different DNS-based rules that are resolved in a local daemon to IPs, then pushed to the eBPF filter to allow traffic. By doing it this way, we can still allow DNS-defined rules, but prevent contacting random IPs. There's also no network performance penalty, since it's just DNS lookups and eBPF filters referencing memory. It also means you don't have to tamper with the base image, which the agent could potentially manipulate…
Jan 2026 · github.com · its alternatives →
- 8
An eBPF tool monitoring a goroutine. Contribute to keisku/gmon development by creating an account on GitHub.
2024 · github.com · its alternatives →
- 9
Lightweight system monitor for Linux VPS. Contribute to leodeim/vpsmon development by creating an account on GitHub.
Aug 2026 · github.com · its alternatives →
- 10
A little web server written in C for Linux. Supports: CGI, Reverse Proxy. Single threaded using I/O multiplexing (select).
2023 · github.com · its alternatives →
- 11PI
2020 · pixielabs.ai · its alternatives →
- 12EA
Having been regularly annoyed by Proton and even Gmail search on emails, especially after working every day with coding agents in the past year or so, I wanted to catch up the experience of searching emails to the rest of the world. Not a big innovation, but a real itch scratcher as far as I'm concerned.
Jun 2026 · margaine.com · its alternatives →
- 13
eBPF-based Linux kernel guard that lets only allowlisted binaries use the TPM. - bschaatsbergen/tpmlsm
19d ago · github.com · its alternatives →
- 14
Hey everyone. I built an MTProto proxy for Telegram aimed at bypassing active DPI censorship like the Russian TSPU. I chose Zig because it's perfect for writing fast network daemons and makes it incredibly easy to port low-level C bypass techniques like TCP desync and packet fragmentation. Would love to get some feedback or contributors!
Apr 2026 · github.com · its alternatives →
- 15
Hi HN! I'm Mo, a platform engineer at Deltaflare working on critical infrastructure protection. I built Cerberus because traditional packet capture tools (tcpdump, Wireshark) have too much overhead for production CNI environments. eBPF lets us filter and classify packets at the kernel level with near-zero performance impact. Some interesting challenges: - eBPF verifier is strict - every memory access needs bounds checking - Limited to 32 bytes of L7 payload (tradeoff between inspection depth and overhead) - TC vs XDP decision (chose TC for compatibility) Looking for contributors, especially…
Dec 2025 · github.com · its alternatives →
- 16
Linux-based CPE for Telia's (AS3249) "Koduinternet" service - tonusoo/koduinternet-cpe
2023 · github.com · its alternatives →
- 17
- 18
Per-executable network bandwidth monitoring for Linux
2022 · elesiuta.github.io · its alternatives →
- 19TY
Hi HN, Some misbehaving networks drop WireGuard packets either by accident or on purpose. Commonly the latter is done with simple DPI rules that block the handshake initiation [1], but it could be applied to other message types as well. We thought it would be great if there was tool for folks to use as a quick litmus test to see if this happening for them, without having to configure a client to send data through a random, functional WireGuard tunnel to an untrusted remote host. So we built probe.sh. How it works: - The probe.sh web app is an Elixir Phoenix app that spawns a few gen_udp…
2024 · probe.sh · its alternatives →
- 20
Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no hardware sniffer. CO-RE portable. - yeet-src/usbsnoop
May 2026 · github.com · its alternatives →
- 21
Bypass censorship with WireGuard and Xray protocols
2025 · tegant.com · its alternatives →
- 22
eBPF Port Knocking Tool. Contribute to eeriedusk/knockles development by creating an account on GitHub.
2022 · github.com · its alternatives →
- 23
Behavioral hidden-cryptominer detector for Linux in eBPF — flags processes talking to mining-pool ports while spoofing kernel-thread names. No signatures, no agent, no cloud. CO-RE portable. - yeet-src/poolnarc
Jun 2026 · github.com · its alternatives →
- 24
Windows Storage Proxy Driver - User mode disk storage - winfsp/winspd
2019 · github.com · its alternatives →
Also compare
- Write your BPF programs in Go, not C alternatives
- Credentials dumper for Linux using eBPF alternatives
- SMTP Tunnel – A SOCKS5 proxy disguised as email traffic to bypass DPI alternatives
- eBPF-powered L4 package dropper alternatives
- Using eBPF to see through encryption without a proxy alternatives
- Bor – Open-source policy management for Linux desktops alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →