SkyTap

What it does

SkyTap sits in front of a server’s outbound connections and works in four modes: observe, intercept, mock and rewrite. It is built on two libraries we wrote for it — skydst, which recovers the original destination of a redirected connection, and gomitm, which handles the TLS interception. It ships with a web interface and an installer, and it is what we run on our own servers.

Built with

• Go
• nftables

Sample data, drawn from how the tool behaves. Not a customer’s system.