stripe/smokescreen
View on GitHub ↗ ★ 1,396 Go
A simple HTTP proxy that fogs over naughty URLs
8 mentions on Hacker News by 6 people: 2 stories, 6 comments · first 2021-07-13 · latest 2024-02-03
20082026
-
Also from Stripe team (used in past, and believe still running without issues to this day) https://github.com/stripe/smokescreen Smokescreen is a HTTP CONNECT proxy. It proxies most traffic from Stripe to the external world (e.g.,…
comment by throwaway888abc · 2024-02-03 · in Show HN: Lockbox: forward proxy for making third party API calls -
Stripe built an OSS egress network proxy that prevents webhooks from reaching internal resources: https://github.com/stripe/smokescreen
comment by spiffytech · 2022-08-19 · in Collection of best practices for providing and consuming webhooks -
…via Smokescreen seems the most reliable if you’re dealing with user controlled arbitrary URLs. [1] https://github.com/stripe/smokescreen
comment by plasma · 2022-01-08 · in Fixing the Unfixable: Story of a Google Cloud SSRF -
Yeah, well, not only HTTP*, but actually whitelisting whatever outgoing connection you may need. https://github.com/stripe/smokescreen Suppose you configured your webserver to run with limited privileges so as if someone hacks it it has…
comment by jve · 2021-12-03 · in Show HN: Automatic proxy setup for SSH'able boxes that have no network access -
> " https://github.com/stripe/smokescreen " I don't understand why they built this. The problem described here is solved by using a firewall, where certain machines/processes are either allowed or disallowed to communicate with other…
comment by csmpltn · 2021-09-09 · in OWASP Top 10 2021 -
…should be quarantine'd, and it does the enforcement of access to internal/external IPs or not. [1] https://github.com/stripe/smokescreen
comment by plasma · 2021-09-09 · in OWASP Top 10 2021