{"id":124728,"date":"2025-05-15T09:05:09","date_gmt":"2025-05-15T07:05:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-tor-predstavil-oniux-utilitu-dlya-setevoj-izolyaczii-prilozhenij"},"modified":"2025-05-15T09:05:09","modified_gmt":"2025-05-15T07:05:09","slug":"proekt-tor-predstavil-oniux-utilitu-dlya-setevoj-izolyaczii-prilozhenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/proekt-tor-predstavil-oniux-utilitu-dlya-setevoj-izolyaczii-prilozhenij","title":{"rendered":"The Tor Project has introduced Oniux, a utility for network isolation of applications.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The Tor project developers have introduced Oniux, a utility designed to force traffic from individual applications through the Tor network. Oniux is similar in purpose to the previously available program torsocks, but differs by utilizing the network namespace isolation provided by the Linux kernel instead of replacing standard library functions via the LD_PRELOAD mechanism. The utility's code is written in Rust and is distributed under the Apache 2.0 and MIT licenses. <\/p>\n
Oniux allows the creation of an isolated container for any application, with traffic being forcibly redirected solely through the Tor network. To send traffic, a tunnel based on onionmasq is created, appearing within the container as a virtual network interface (TUN). Access to network interfaces available in the main environment is blocked at the network stack isolation level within the separate namespace. <\/p>\n
Compared to torsocks, the new utility does not just replace library functions but also blocks possible leakage channels (for example, redirection through torsocks can be bypassed by direct calls to the kernel system calls). The program also protects against leaks caused by configuration errors in SOCKS proxies directing traffic to the Tor network. The price for stricter isolation is a loss of cross-platform support \u2014 Oniux can only operate in Linux. <\/p>\n
The Oniux utility is self-sufficient and does not require the launching of a separate Tor background process to operate. Interaction with the Tor network in Oniux is built using a library developed by the Arti project, while torsocks is based on CTor and uses SOCKS proxies. Oniux may prove useful for running applications and services that are critically important for ensuring privacy. <\/p>\n
Usage involves adding a call to the utility \u2018oniux\u2019 before launching the desired program. For example, to send a request via curl over Tor, you can execute the command \u2018oniux curl URL\u2019, and to route any requests through Tor within a command interpreter session \u2014 \u2018oniux bash\u2019. Isolation of graphical applications is supported. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"