WANProxy is presently considered beta software at best. Though it has been under development for some time now and has seen extensive testing, that testing has been in limited environments. The issues enumerated here tend to be major issues that are outstanding. An accounting of minor problems and problems which have been fixed will appear after version 1.0.

WANProxy is a fairly simple program at present and does not support some key features which are necessary to build a production-deployable proxy.

Because no authentication is currently performed between WANProxy instances, an attacker with knowledge of the WANProxy protocol could attempt to guess the symbolic identifiers that WANProxy uses to refer to previously-sent data to discover sensitive information. This will be fixed in the future.

No limits on buffering are currently set meaning that the WANProxy program can take a lot of memory for a large transfer, and that there may be a lack of backpressure on both sides of a proxy.

Copyright © 2008-2015