Package: snid
Version: 0.3.0-2
Architecture: arm64
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Original-Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Installed-Size: 4281
Depends: libc6 (>= 2.34)
Static-Built-Using: golang-1.24 (= 1.24.2-2), golang-agwa-go-listener (= 0.6.1-1.1)
Section: net
Priority: optional
Homepage: https://github.com/AGWA/snid
Description: Oblivious TLS-SNI proxy with zero config IPv4/v6 translation
 A lightweight proxy used to forward TLS connections (without decryption)
 to backend servers listening on IPv6 or UNIX sockets based only on the
 cleartext server name indication (SNI) hostname. Note: ESNI/ECH is not
 (yet) supported.
 .
 Backend addresses are constructed based on DNS lookups or filesystem path
 for IPv6 and UNIX listeners respectively, making snid deployments
 exceedingly easy to manage.
 .
 Unlike other TLS-SNI proxies snid's address mapping approach (-mode nat46)
 allows exposing any unmodified TLS-based service listening on IPv6 towards
 legacy IPv4 with no configuration or loss of client identity by encoding
 IPv4 client addresses into IPv6 source addresses.
 .
 Running a few snid nodes across an infrastructure thus removes the need to
 think about legacy IP problems like address exhaustion, port-forwarding or
 multi-layer NAT ever again.
 .
 Client identity in snid isn't handled using hacks such as the PROXY
 protocol or X-Forwarded-For/X-Real-IP headers in the case of HTTP based
 protocols. This avoids confusion as to what is the real client IP, at
 least for programs not already expecting these.
