Aroma: Every TCP Proxy Is Detectable with RTT Fingerprinting

Hacker News

TL;DR explanation (go to https://github.com/Sakura-sx/Aroma?tab=readme-ov-file#tldr-e... if you want the formatted version) This is done by measuring the minimum TCP RTT (client.socket.tcpi_min_rtt) seen and the smoothed TCP RTT (client.socket.tcpi_rtt). I am getting this data by using Fastly Custom VCL, they get this data from the Linux kernel (struct tcp_info -> tcpi_min_rtt and tcpi_rtt). I am using Fastly for the Demo since they have PoPs all around the world and they expose TCP socket data to me. The score is calculated by doing tcpi_min_rtt/tcpi_rtt. It's simple but it's what worked best for this with the data Fastly gives me. Based on my testing, 1-0.7 is normal, 0.7-0.3 is normal if the connection is somewhat unstable (WiFi, mobile data, satellite...), 0.3-0.1 is low and may be a proxy, anything lower than 0.1 is flagged as TCP proxy by the current code.

Visit product View on Hacker NewsDec 25, 2025

Share card

Actual performance

86points

54comments

Made the leaderboard

Launch Intel predictions

Analyze your own launch →

Hacker NewsStrong engagement from HN community · Strong signals: io · Missing: https docs, excited, just released

68%68% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

Product HuntOn track for Day 1 leaderboard · Strong signals: using, code · Missing: mac, agents, macos

55%55% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive

43%43% predicted probability of success on AppSumo, based on ML models trained on real launch data.

Indie HackersIH features products with proven revenue · Missing: supports, reddit linkedin, podcasting

42%42% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

TrustMRRLess likely to generate early MRR · Missing: mobile apps, ios, personal

39%39% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

14%14% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

3%3% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

A CORS proxy in a container42%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

A CORS proxy in a container

Hacker News5

Cors-container – A CORS proxy in a container42%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Cors-container – A CORS proxy in a container

Hacker News3

A CORS proxy in a container42%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

A CORS proxy in a container

Hacker News7

RedFI – Redis Fault-Injection Proxy40%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

RedFI – Redis Fault-Injection Proxy

Hacker News6

ChromeDriver Proxy an extensible proxy to ChromeDriver49%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

ChromeDriver Proxy an extensible proxy to ChromeDriver

Hacker News2

Inlets as an IPv6 Proxy45%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Inlets as an IPv6 Proxy

Hacker News2

Notifier/Proxy Logger39%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Notifier/Proxy Logger

Hacker News1

Proxy.py47%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Proxy.py

Hacker News3

Programmable Proxy for Trino56%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Programmable Proxy for Trino

Hacker News1

WrapGuard – Userspace WireGuard Proxy64%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

WrapGuard – Userspace WireGuard Proxy

Hacker News3

Browse all products Analyze your launch