Dan Guido

Router support

8

Many users have installed Algo on their routers, rather than a VPS provider, and this issue aggregates documentation for them. - [ ] PFSense (writeups [one](https://github.com/trailofbits/algo/issues/614) and [two](https://github.com/trailofbits/algo/issues/292)) - [...

Consider using harddns over dnscrypt-proxy

3

https://github.com/stealth/harddns It might be smaller and faster than dnscrypt-proxy

## Overview This is a tracking issue for the various problems users experience when deploying Algo VPN on Google Cloud Platform (GCE). While Google Cloud technically supports VPN deployments, users...

## Summary Algo VPN services (WireGuard, StrongSwan, dnscrypt-proxy) currently share the same network namespace, allowing compromised services to interfere with each other. Implementing network namespace isolation would provide defense-in-depth by...

## Overview Algo VPN currently supports Ubuntu 20.04/22.04 LTS as primary platforms. With Ubuntu 24.04 LTS (Noble Numbat) now available, we should update support to use the latest LTS release...

## Summary `config.cfg` lines 141-200 contain cloud provider defaults (instance sizes, images, etc.) that logically belong in the individual cloud role's `defaults/main.yml` files. ## Current Structure ```yaml # config.cfg lines...

Only open VPN ports in cloud security groups when enabled

1

## Summary When `ipsec_enabled` or `wireguard_enabled` is `false`, don't open those ports in cloud provider security groups/firewalls. Previously, ports 500, 4500, and the WireGuard port were always opened regardless of...

Title: DetectReentrancyAdvanced false positive on 2300-gas transfer causes ethereum_bench failure (eth_tx_order_dependence_multitx_1) Summary The ConsenSys benchmark test eth_tx_order_dependence_multitx_1 fails due to a false-positive reentrancy finding from DetectReentrancyAdvanced. The contract uses address.transfer(...)...

Linux binary symbolic execution not exploring multiple paths

1

# Bug: Linux binary symbolic execution not exploring multiple paths ## Summary The `examples/linux/basic` example only generates 1 test case instead of the expected 2. The symbolic execution is not...

# AArch64 UMOV instruction fails with Aarch64InvalidInstruction when VAS is ARM64_VAS_INVALID ## Summary The AArch64 UMOV instruction handler raises `Aarch64InvalidInstruction` when processing certain valid UMOV/MOV instructions. This occurs when Capstone...