Get past the warning
On the SmartScreen dialog, choose More info, then Run anyway. If you would rather not, build from source instead — the instructions are further down this page.
Download
One installer, no runtime to install first. It is a pre-release and it is not code-signed yet — both of those are stated plainly below rather than discovered later.
01 Before you run it
The MSI is not code-signed yet, so SmartScreen shows “Windows protected your PC” and names an unknown publisher. That is expected for this release, and it is not a reason to trust the file blindly either.
On the SmartScreen dialog, choose More info, then Run anyway. If you would rather not, build from source instead — the instructions are further down this page.
Every release publishes a checksums.txt asset next to the MSI. Compare the
SHA-256 of the file you downloaded against the entry for it.
# the hash on the left should match checksums.txt
> Get-FileHash .\TotallyHotArcRouter-1.0.0.msi -Algorithm SHA256
02 Requirements
03 Updates
Once installed, the router checks for new releases every six hours and the GUI offers to apply what it finds. Applying one restarts the service, so it is never done silently.
04 From source
The whole thing is public. Cloning and building gives you the router, the GUI, and the sandbox, with no unsigned binary to reason about.
$ git clone https://github.com/davidpizon/TotallyHot-ArcRouter.git
$ cd TotallyHot-ArcRouter/src
$ dotnet build TotallyHotArcRouter.slnx -c Release
You will need the .NET SDK; the pinned target lives in
src/Directory.Build.props. The
bootstrap guide takes it from there through the benchmark sync
and a first routed request.
05 Terms
GNU Affero General Public License v3.0, with an additional permission for linking against Microsoft platform components. Use it, modify it, redistribute it — but if you distribute it or run a modified version as a network service, publish your corresponding source under the same terms.
Read the license →Every dependency the project redistributes is MIT, Apache-2.0, or BSD-3-Clause, so no dependency imposes copyleft of its own. Attributions are listed in full.
Third-party notices →Found something that should not be filed in public? The repository carries a security policy with the disclosure process to follow.
Security policy →