WraithFlow — Feature Sections

Install:

curl -fsSL https://raw.githubuserconten…

Config-driven pipelines

Any number of [[proxies]] in one file. Each pipeline is its own async task — one crashing doesn't take the others down. No protocol awareness required: full-duplex, byte-for-byte.

config.toml

stats_interval_secs = 30 [[proxies]] name = "http-traffic-gateway" listen = "127.0.0.1:45634" target = "127.0.0.1:9000" output = "json-pretty" [[proxies]] name = "secure-db-relay" listen = "127.0.0.1:3306" target = "127.0.0.1:3307" log_payloads = false // anything carrying secrets

See exactly what crosses the wire

Per-pipeline output profiles — hexdump, pretty JSON, raw, base64 — with redact to mask secrets and highlight to call out what matters. Colors come from the shared cybercore CYBERGRID palette, not hardcoded ANSI.

wraithflow

[FLOW] 127.0.0.1:45634 → 127.0.0.1:9000 { "method": "POST", "path": "/api/token", "auth": "***********" } connections 12 · bytes 3.8 MiB · errors 0

Live stats, no journalctl scraping

Every pipeline tracks connections, bytes each way, and errors — printed on an interval whether or not payload logging is on, and available on demand over a read-only Unix control socket.

socat

$ echo '{"cmd":"stats"}' | socat - UNIX-CONNECT:/run/wraithflow/control.sock {"pipelines":[{"name":"http-traffic-gateway","bytes_in":184320,"bytes_out":51200,"connections_active":3,"errors_total":0}]}

wf-tui — the live dashboard

A separate binary over that same socket, so the daemon itself never carries ratatui/crossterm's dependency tree. Symlinked into ~/.local/bin next to wraithflow — no cargo run -p needed day to day.

wf-tui

$ wf-tui --socket /run/wraithflow/control.sock --interval 1

Install & run

Prebuilt binaries for Linux (x86_64/aarch64) and macOS (x86_64/aarch64), checksum-verified before they touch disk. No release for your platform, or no curl? cargo install --git works from source on anything.

curl | shcargoadmin

shell

# detects OS/arch, verifies sha256, installs to ~/.local/bin curl -fsSL https://raw.githubusercontent.com/cybercore-tech/wraithflow/main/install.sh | sh # run as a --user service, no sudo incantation needed wraithflow --admin --start wraithflow --admin --status

Everything, at a glance

Any number of pipelines, one config file
Full-duplex, protocol-unaware forwarding
hexdump / JSON / raw / base64 output
Redact + highlight, substring-filtered
Per-pipeline min-size / direction filters
Live [STATS] line, configurable interval
Read-only Unix control socket, 0600
wf-tui — live terminal dashboard
--admin service control, no sudo dance
Graceful shutdown, drains in-flight conns
Fails fast on bad config before binding
CYBERGRID-themed color output

dev@cybercoretech.net