Hulios, a Rust-based transparent Tor proxy, routes all system traffic through the Tor network, offering enhanced security and DNS isolation. This eBPF-powered gateway redirects TCP sockets and DNS queries via an embedded Arti Tor client and a local Hickory DNS resolver. It operates at the kernel socket level using cgroup hooks and policy routing, creating robust leak-resistant boundaries without altering resolv.conf or relying on external firewalls.

Hulios employs a strict privilege-separated runtime model. A supervisor runs with root privileges to set up eBPF programs and policy routing tables, then spawns an unprivileged worker. This worker drops privileges to 'nobody' and is isolated with a restrictive seccomp filter. A fail-secure kill-switch locks traffic routing via kernel policy tables, ensuring blackholes remain active even on daemon crashes to prevent IP leaks.

Requirements include Linux Kernel 5.10+ with specific eBPF and cgroups configurations enabled. Tested on Arch Linux and Debian 13. Installation is available via the Arch User Repository or by building from source with dependencies like clang and libelf. Hulios automatically generates a default configuration file at /etc/hulios/config.toml for customization.

While Hulios secures the network transport layer, it does not guarantee total anonymity or protect against application-level tracking or host compromise. The developer assumes no liability for misuse or data leaks.