Aperture Internet Laboratory
For a free and open Internet.
Explained projects
apernet-traced: How One C Program Can Lie Convincingly to traceroute
A compact Linux packet engine that forges ICMP Time Exceeded replies, injects MPLS labels, and makes a single host look like a whole provider backbone.
The Ghost in the Subnet: Unpacking iptables-mod-randmap
How an experimental kernel module bypasses connection tracking to turn a single server into a shapeshifting network prefix.
The Unix Immune System: Unpacking apernet/apermon
How a minimalist C daemon bypasses the bloated observability stack to turn raw sFlow data into instant DDoS mitigation.
Routing as a Weapon: Inside apernet-public-utils
How the team behind the Hysteria proxy uses minimalist Bash scripts to manipulate IPv6 tables, bypass geo-blocks, and squeeze maximum throughput out of cheap VPS instances.
apernet/hysteria-website: The Proxy Protocol Waging War on Network Entropy
How a custom QUIC implementation and behavioral mimicry turned a personal project into a high-speed lane through state-level censorship.
Hysteria: The "Brutal" Protocol That Refuses to Slow Down
While the rest of the web politely yields to network congestion, Hysteria 2 uses a customized QUIC transport to punch through censorship and throttled networks.