Entropy Shield
Entropy Shield is Maze's anonymity stack in one place. Instead of wiring Tor, encrypted DNS and I2P together yourself, you turn them on from one interface.
It is not running by default. Entropy Shield is installed, but you start it. Nothing is routed through Tor until you say so.
What it can turn on
| Layer | What it does |
|---|---|
| Tor transparent proxy | Routes system traffic through Tor, not just a browser |
| DNSCrypt | Encrypts DNS queries so your resolver cannot read them |
| I2P (i2pd) | The I2P overlay network |
| Onion server | Publish a hidden service from your own machine |
Maze does not ship a standalone
dnscrypt-proxyservice, andi2pdis not on the ISO either — these are layers Entropy Shield manages, not background services you will find already enabled.
Kill switch
Entropy Shield includes a kill switch: if the anonymity layer drops, traffic is blocked rather than silently falling back to your normal connection. This is the difference between "my VPN dropped" and "my VPN dropped and I did not notice".
It also applies nftables IPv6 leak protection, because IPv6 is the usual way traffic escapes an otherwise correct Tor or VPN setup.
Isolated browser profiles
Entropy Shield can launch isolated Firefox profiles so your anonymous browsing does not share cookies, history or cache with your everyday profile.
Running it
entropy-shield # or launch from the application menu
entropy-shield --help # full option list