Show HN: Forwarder – FOSS MITM proxy written in Go • Hacker News Board

Show HN: Forwarder – FOSS MITM proxy written in Go

#1

Post by michalmatczuk » Wed, Dec 20, 2023, 3:30 PM UTC

I'm working at Sauce Labs on a fast MITM proxy.

If you are using mitmproxy, Fiddler or Charles proxy in your job I believe you'll find it invaluable.

Forwarder 1.1 is now available, complete with a Grafana Dashboard for effortless monitoring. We are committed to making it great.

I welcome your feedback.

Cheers Michał

Show HN: Forwarder – FOSS MITM proxy written in Go
forwarder-proxy.io

Re: Show HN: Forwarder – FOSS MITM proxy written in Go

#2

Post by jzelinskie » Wed, Dec 20, 2023, 6:34 PM UTC

For those with blocking rules around newly registered DNS: https://github.com/saucelabs/forwarder

Re: Show HN: Forwarder – FOSS MITM proxy written in Go

#3

Post by Snawoot » Wed, Dec 20, 2023, 7:12 PM UTC

Great! Here is the feedback: https://github.com/saucelabs/forwarder/issues/616

Re: Show HN: Forwarder – FOSS MITM proxy written in Go

#4

Post by ronsor » Wed, Dec 20, 2023, 8:38 PM UTC

jzelinskie wrote: post #2

For those with blocking rules around newly registered DNS: https://github.com/saucelabs/forwarder

> blocking rules around newly registered DNS

Why is this even a thing?

Re: Show HN: Forwarder – FOSS MITM proxy written in Go

#5

Post by sigmonsays » Wed, Dec 20, 2023, 8:45 PM UTC

am i reading this correctly that it could be used as an adblock?

is the PAC format powerful enough to handle everything that current adblockers do?

Re: Show HN: Forwarder – FOSS MITM proxy written in Go

#6

Post by tedunangst » Wed, Dec 20, 2023, 9:24 PM UTC

ronsor wrote: post #4

jzelinskie wrote: post #2

For those with blocking rules around newly registered DNS: https://github.com/saucelabs/forwarder

> blocking rules around newly registered DNS Why is this even a thing?

Moderately effective anti phishing. Your real bank's domain is older than last week.

Re: Show HN: Forwarder – FOSS MITM proxy written in Go

#7

Post by ronsor » Wed, Dec 20, 2023, 9:42 PM UTC

tedunangst wrote: post #6

ronsor wrote: post #4

Earlier quoted context omitted.

> blocking rules around newly registered DNS Why is this even a thing?

Moderately effective anti phishing. Your real bank's domain is older than last week.

Most malware/scam domains I've seen are generally a few weeks old, which is still fairly new, but not quite last week.

Re: Show HN: Forwarder – FOSS MITM proxy written in Go

#8

Post by michalmatczuk » Wed, Dec 20, 2023, 9:51 PM UTC

Snawoot wrote: post #3

Great! Here is the feedback: https://github.com/saucelabs/forwarder/issues/616

Thank you, looks like we could apply some hardening here indeed.

Re: Show HN: Forwarder – FOSS MITM proxy written in Go

#9

Post by michalmatczuk » Wed, Dec 20, 2023, 10:13 PM UTC

sigmonsays wrote: post #5

am i reading this correctly that it could be used as an adblock? is the PAC format powerful enough to handle everything that current adblockers do?

You have a lot of flexibility with PAC files, so I guess that's possible. Some PAC files can be quite complex.

Another option would be using --deny-domains it accepts a list of regular expressions, you can prefix an item with - to exclude it.

https://forwarder-proxy.io/cli/forwarder_run/#deny-domains

Re: Show HN: Forwarder – FOSS MITM proxy written in Go

#10

Post by visualphoenix » Wed, Dec 20, 2023, 10:17 PM UTC

Wish this had a caching feature… Setting up squid as a https caching forward proxy in docker is a pain.