Editing ANIL Linux (section)

== Security and Privacy Gateway ==

ANIL Linux is built upon **Alpine Linux** due to its minimal footprint and focus on security. It runs entirely headless, managed exclusively via a secure SSH connection and an optional, lightweight web interface.

* '''Dedicated VPN Stack:''' The core function is its pre-configured, hardened VPN stack, supporting modern protocols like **WireGuard and OpenVPN**. The system defaults to strict forwarding rules, only allowing traffic explicitly authorized through the encrypted tunnel.
* '''Immutable Core:''' Like other security-focused minimal distributions, ANIL Linux uses a read-only root filesystem. All network configurations and keys are stored in a small, separate, encrypted partition. This design prevents persistent modification by malware and ensures a clean, verifiable boot state every time.
* '''Transparent Proxying:''' It includes tools for transparently proxying network traffic through anonymization layers like **Tor** or other encrypted services. This is configured via simple firewall rules, eliminating the need for client-side configuration changes on connected devices.

ANIL Linux is a preferred choice for setting up a dedicated, low-cost hardware gateway that secures all local network traffic before it reaches the wider internet, serving as a first line of defense against network surveillance.