Burrow is an open source tool for burrowing through firewalls. https://burrow.net
  • Rust 74.4%
  • Swift 7.1%
  • Python 6%
  • Shell 5.9%
  • Go 2.3%
  • Other 4.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Conrad Kramer 7c28b8cc6c
All checks were successful
Build Rust / Cargo Test (push) Successful in 11m56s
Build Site / Next.js Build (push) Successful in 27s
Lint Governance / BEP Metadata (push) Successful in 42s
Release: If Needed / Check (Release Needed) (push) Successful in 9s
Cancel provider configuration with its tunnel lifecycle
2026-09-27 15:48:18 -07:00
.cargo Commit remaining Burrow platform work 2026-03-31 23:35:36 -07:00
.forgejo Validate Android builds for shared Rust crate changes 2026-09-27 09:06:45 -07:00
.github worker: scaffold non-promoting R2 evidence 2026-08-23 01:28:20 -07:00
.vscode GRPC Server Support 2024-09-08 11:33:11 +08:00
Android Expose explicit Android subnet route acceptance 2026-09-27 03:52:50 -07:00
Apple Cancel provider configuration with its tunnel lifecycle 2026-09-27 15:48:18 -07:00
bazel Build Rust-owned Android VPN qualification lane 2026-08-16 16:52:27 -07:00
burrow Wire Android file intake and saved connection controls to Rust 2026-09-27 03:48:01 -07:00
burrow-gtk worker: scaffold non-promoting R2 evidence 2026-08-23 01:28:20 -07:00
crates Select celld launch and health contracts by runtime version 2026-09-27 08:58:43 -07:00
deploy Build Burrow platform routing and release stack 2026-08-16 14:21:56 -07:00
design/brand Add raster panel icon family 2026-06-08 00:20:25 -07:00
docs Reconcile latest main with Rust worker RPC and native Apple presentation 2026-09-27 03:02:29 -07:00
evolution Cancel provider configuration with its tunnel lifecycle 2026-09-27 15:48:18 -07:00
infra Require explicit remote-state release storage management 2026-09-27 04:31:54 -07:00
nixos Initialize OpenBao with approved encrypted recovery custody and audit 2026-09-27 02:27:00 -07:00
package Wire Forge-native release infrastructure 2026-06-07 05:51:12 -07:00
patches Wire Apple KMS release signing 2026-06-07 07:28:48 -07:00
proto Wire Android file intake and saved connection controls to Rust 2026-09-27 03:48:01 -07:00
Scripts Cancel provider configuration with its tunnel lifecycle 2026-09-27 15:48:18 -07:00
secrets Initialize OpenBao with approved encrypted recovery custody and audit 2026-09-27 02:27:00 -07:00
services Repair Linux package portability and daemon state setup 2026-09-27 05:37:14 -07:00
site Build Burrow platform routing and release stack 2026-08-16 14:21:56 -07:00
store-metadata Build Burrow platform routing and release stack 2026-08-16 14:21:56 -07:00
systemd Repair Linux package portability and daemon state setup 2026-09-27 05:37:14 -07:00
third_party worker: scaffold non-promoting R2 evidence 2026-08-23 01:28:20 -07:00
Tools Join port-mapper tasks through engine shutdown 2026-09-27 15:23:51 -07:00
tun Compile shared Rust runtime for Android and verify native boundaries 2026-09-26 22:50:29 -07:00
.bazelignore Wire Forge-native release infrastructure 2026-06-07 05:51:12 -07:00
.bazelversion Pin native Linux CI toolchains 2026-08-22 20:27:26 -07:00
.devcontainer.json Initial commit 2023-04-10 16:49:23 -04:00
.dockerignore Create Dockerfile 2023-07-04 20:15:27 -04:00
.gitignore Build Rust-owned Android VPN qualification lane 2026-08-16 16:52:27 -07:00
.gitlint Ignore body is missing errors 2023-06-23 16:21:58 -04:00
.rustfmt.toml Implement Wireguard 2023-12-23 11:26:05 -08:00
.swiftlint.yml Switch to gRPC client in Swift app 2024-09-09 10:38:13 -07:00
AGENTS.md Keep worker presentation in Rust behind bounded snapshot RPC 2026-09-27 02:55:54 -07:00
BUILD.bazel Include vendored logging dependency in Apple Bazel inputs 2026-09-27 03:28:44 -07:00
burrow-server-compose.yml Add Support for IPV6 and Arbitrary Server Address 2024-02-24 12:44:31 -05:00
Cargo.lock Reconcile latest main with Rust worker RPC and native Apple presentation 2026-09-27 03:02:29 -07:00
Cargo.toml Reconcile latest main with Rust worker RPC and native Apple presentation 2026-09-27 03:02:29 -07:00
CONSTITUTION.md Commit remaining Burrow platform work 2026-03-31 23:35:36 -07:00
contributors.nix Prepare persistent residents and operable secrets signing telemetry stack 2026-09-26 22:35:19 -07:00
design-qa.md Build Burrow platform routing and release stack 2026-08-16 14:21:56 -07:00
Dockerfile Wire Forge-native release infrastructure 2026-06-07 05:51:12 -07:00
flake.lock Prepare persistent residents and operable secrets signing telemetry stack 2026-09-26 22:35:19 -07:00
flake.nix Reconcile latest main with Rust worker RPC and native Apple presentation 2026-09-27 03:02:29 -07:00
LICENSE.md Create LICENSE.md 2023-04-18 21:56:01 -04:00
Makefile Add governance and identity registry scaffolding 2026-04-03 01:36:10 -07:00
MODULE.bazel Build Burrow platform routing and release stack 2026-08-16 14:21:56 -07:00
MODULE.bazel.lock Build Burrow platform routing and release stack 2026-08-16 14:21:56 -07:00
README.md Reconcile latest main with Rust worker RPC and native Apple presentation 2026-09-27 03:02:29 -07:00
rust-toolchain.toml Add Linux tor-exec namespace runtime 2026-03-30 20:01:55 -07:00
secrets.nix Initialize OpenBao with approved encrypted recovery custody and audit 2026-09-27 02:27:00 -07:00
server_patch.txt Add Support for IPV6 and Arbitrary Server Address 2024-02-24 12:44:31 -05:00
THIRD_PARTY_NOTICES.md Vendor the system JSC worker engine 2026-08-19 04:48:46 -07:00

Burrow

Burrow is an open source tool for burrowing through firewalls, built by teenagers at Hack Club.

burrow provides a simple command-line tool to open virtual interfaces and direct traffic through them. Routine verification runs unprivileged with the product and evidence feature lanes in .forgejo/workflows/build-rust.yml; only tunnel startup needs elevation. The live-evidence and product-authority features are deliberately incompatible and must be tested separately. Enable RUSTFLAGS="--cfg tokio_unstable" when testing the optional tokio-console instrumentation feature. The canonical source forge is git.burrow.net/hackclub/burrow.

The repository now carries its own design and deployment record:

Contributing

Burrow is fully open source, you can fork the repo and start contributing easily. For more information and in-depth discussions, visit the #burrow channel on the Hack Club Slack, here you can ask for help and talk with other people interested in burrow. Checkout GETTING_STARTED.md for build instructions and GTK_APP.md for the Linux app. Forge and deployment scaffolding live in flake.nix, nixos/, and .forgejo/workflows/. Hosted mail backup operations live in docs/FORWARDEMAIL.md and Tools/forwardemail-custom-s3.sh. Platform service and distribution rollout notes live in docs/PLATFORM_SERVICES.md and docs/DISTRIBUTION.md.

Agent and governance-sensitive work should start with AGENTS.md, CONSTITUTION.md, and the relevant BEPs under evolution/proposals/. Identity and bootstrap metadata now live in contributors.nix.

The project structure is divided in the following folders:

Apple/ # Xcode project for burrow on macOS and iOS
burrow/ # Higher-level API library for tun and tun-async
burrow-gtk/ # GTK project for burrow on Linux
tun/ # Low-level interface to OS networking
    src/
        tokio/ # Async/Tokio code
        unix/ # macOS and Linux code
        windows/ # Windows networking code

Installation

To start burrowing, download the latest release build in the release section.

Hack Club

Hack Club is a global community of high-school hackers from all around the world! Start your own Hack Club, attend an upcoming hackathon or join our online community at hackclub.com.

License

Burrow is open source and licensed under the GNU General Public License v3.0

Contributors

See the canonical forge history for current contributors.