{"id":50805555,"url":"https://github.com/weisshorn-cyd/bifrost","last_synced_at":"2026-06-13T00:33:18.489Z","repository":{"id":364084186,"uuid":"1266275965","full_name":"weisshorn-cyd/bifrost","owner":"weisshorn-cyd","description":"Encrypted SOCKS5 tunneling over DNS and DNS-over-HTTPS","archived":false,"fork":false,"pushed_at":"2026-06-11T16:10:17.000Z","size":1937,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-06-11T16:15:07.414Z","etag":null,"topics":["dho","dns","socks5","socks5-proxy","socks5-server"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/weisshorn-cyd.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-06-11T13:22:15.000Z","updated_at":"2026-06-11T16:10:12.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/weisshorn-cyd/bifrost","commit_stats":null,"previous_names":["weisshorn-cyd/bifrost"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/weisshorn-cyd/bifrost","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/weisshorn-cyd%2Fbifrost","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/weisshorn-cyd%2Fbifrost/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/weisshorn-cyd%2Fbifrost/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/weisshorn-cyd%2Fbifrost/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/weisshorn-cyd","download_url":"https://codeload.github.com/weisshorn-cyd/bifrost/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/weisshorn-cyd%2Fbifrost/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34268187,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-12T02:00:06.859Z","response_time":109,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dho","dns","socks5","socks5-proxy","socks5-server"],"created_at":"2026-06-13T00:33:15.438Z","updated_at":"2026-06-13T00:33:18.427Z","avatar_url":"https://github.com/weisshorn-cyd.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"![Bifrost logo](assets/logo.png)\n\n# Bifrost\n\nThis repository contains a compact Go implementation of the `SPEC.md` draft:\n\n- SOCKS5 client with CONNECT support.\n- Server with UDP DNS TXT and DoH `/dns-query` transports.\n- PSK-authenticated HKDF-SHA256 session keys, ChaCha20-Poly1305 AEAD packets, per-session stream IDs, retry/retransmission, duplicate response cache, destination allow-list, audit logging, and Prometheus-style `/metrics`.\n\nRun a local server:\n\n```sh\ngo run ./cmd/server -secret test-secret -allow '127.0.0.1:*' -dns-addr 127.0.0.1:5353 -http-addr 127.0.0.1:8053\n```\n\nFor public recursive DNS use, delegate the tunnel domain to the server and expose UDP `:53`.\nFor `cdn.example.com`, a parent zone can delegate to `ns1.example.com`, and Bifrost will\nanswer authoritative `NS`/`SOA` records for `cdn.example.com`. Override the advertised\nnameserver with `-ns-name` or `BIFROST_NS_NAME` when needed.\nThe server defaults to `-response-payload-size 160`, which is conservative for recursive\nDNS over UDP; increase it only when your DNS path supports larger responses.\nUse `-trace-level summary` for per-stream close summaries, or `-trace-level verbose` for\nper-request DNS/DoH traces plus stream events.\n\nRun a local SOCKS client over DoH:\n\n```sh\ngo run ./cmd/client -secret test-secret -listen 127.0.0.1:1080 -doh-url http://127.0.0.1:8053/dns-query\n```\n\nUse `-dns-addr` for direct UDP DNS, `-doh-url` for DoH, or neither to use the machine resolver.\nThe client defaults to `-poll-interval 1s`; lowering it reduces latency but increases DNS\nquery volume and server CPU. Set `-poll-interval 0` to disable periodic idle polling while\nkeeping active response draining.\n\nProxy curl through it:\n\n```sh\ncurl --socks5-hostname 127.0.0.1:1080 http://127.0.0.1:8080/\n```\n\nThe server defaults to deny-all egress. Use `-allow` or `BIFROST_ALLOW` to permit destinations.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fweisshorn-cyd%2Fbifrost","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fweisshorn-cyd%2Fbifrost","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fweisshorn-cyd%2Fbifrost/lists"}