Threadway
Selective, transparent tunneling that keeps RDP and SMB working on restrictive networks. Matching flows are re-encapsulated through a user-space stack; everything else goes out untouched.
Working repo / crate name: packet-tweaker
Built to keep legitimate services working on locked-down networks. Use it only on networks and systems you own or are explicitly authorized to use — bypassing network controls may breach acceptable-use policies or local law.
What it does
Restrictive networks — captive public Wi-Fi, hotel and airport access points — often block or interfere with protocols like RDP and SMB. Threadway watches your traffic, and only for the flows you choose, transparently re-routes them so they keep working. Everything else leaves your machine exactly as it normally would. You define the matching rules; Threadway handles the rest.
Highlights
- Selective by design — only flows that match your rules are tunneled; all other traffic is left completely untouched.
- Transparent re-encapsulation — matching traffic is terminated in a user-space TCP/IP stack to avoid the meltdown of tunneling TCP inside TCP.
- Profile & ruleset builder — a visual editor for defining what to tunnel and how, with live validation and saved profiles.
- Multiple transport modes — from a no-relay direct mode to a transparent relay and a TLS-over-443 path for the most restrictive networks.
- Cross-platform — built on Tauri + Rust for native desktop installers, with a mobile-capable architecture.
Status
Phase 1 scaffold. The full control surface — the profile/ruleset builder UI, the typed IPC contract, the profile store, and the validation engine — is built and wired end-to-end. The data plane (virtual interface, OS routing, the user-space stack, and the outer transports) is built out in subsequent phases.
Built with
A Rust core with a thin desktop binary, a React + TypeScript front-end, all shipped inside a Tauri v2 shell for cross-platform native installers.
More repositories
- AI Keyboard— Privacy-respecting Android keyboard. Bring your own AI provider.
- Watchlist Technicals— Pro-grade technical indicators, charts, and news sentiment — offline-capable, in your pocket.
- Cyber-Football— VPN-controlled USB HID implant on a Pi Zero W. Composite gadget: keyboard, network, storage.
- Cyberhound— Persona-and-device tracking — converge on a known target's devices across RF and network signals.