RawLink - Encrypted TCP tunnel with SSH obfuscation

Show HN: RawLink – Building a VPN protocol from scratch

RawLink is a fast, encrypted TCP tunnel written in Rust that routes traffic through a local SOCKS5 proxy, encrypts it with AES-256-GCM, and forwards it via a secure tunnel to a remote server. It supports multiple streams per connection, automatic reconnection, and pre-shared key authentication. What sets RawLink apart is its optional obfuscation layer: it can disguise traffic as random noise or mimic an SSH session, making it harder to detect and block. Ideal for privacy-conscious users and those in restrictive networks, RawLink is easy to set up with simple server and client commands. Note that it's under development and hasn't yet undergone a thorough security audit.

The optional obfuscation layer modifies how traffic looks on the network, making it harder to recognize as RawLink traffic. It can also use optional SSH traffic mimicry.

More from this day

2026-10-20