mrmave/gaunter repository overview

⁠Gaunter

Hidden Service Reverse Proxy & Web Application Firewall

Gaunter is a high-performance reverse proxy and Web Application Firewall (WAF) built on the Pingora framework, specifically designed to protect Tor and I2P hidden services.

⁠Features

• Protocol-Native Shielding: Drops malicious traffic from hidden networks at Layer 4 before expensive HTTP parsing.
• WAF Engine: Real-time inspection for SQLi, XSS, and common L7 attacks.
• Tor PoW Integration: Automated escalation to Tor Proof-of-Work during heavy attacks.
• No-JS CAPTCHA: Secure browser challenges that work in Tor's "Safest" level.
• Stateless & Database-less: Ready for zero-config deployments.

⁠Bundled Services

The Docker image includes the following core services:

• Tor: v0.4.9.x
• i2pd: v2.59.x

⁠Deployment

⁠Docker Compose

services:
  gaunter:
    image: mrmave/gaunter:latest
    restart: unless-stopped
    env_file: .env
    volumes:
      - ./tor_keys:/var/lib/tor/hidden_service/
      - ./torrc:/etc/tor/torrc:ro

⁠Docker Pull

docker pull mrmave/gaunter:latest

⁠Configuration (Required)

⁠Image Verification

Gaunter images are signed via Cosign.

wget https://git.mrmave.work/maverick/gaunter/raw/branch/main/certs/cosign.pub
cosign verify --key cosign.pub mrmave/gaunter:latest

GPG identities for releases can be verified via WKD:

gpg --locate-keys [email protected]

⁠Links

• Repository⁠
• Configuration Reference⁠
• Benchmarks⁠
• Security⁠
• Blog Post⁠

⁠License

AGPL-3.0⁠