shadowsocks/shadowsocks-libev
Shadowsocks Libev
shadowsocks-libev is an event-driven network daemon that provides an encrypted SOCKS5 proxy. It functions as a lightweight proxy server using a non-blocking event loop to route TCP and UDP traffic through encrypted tunnels to bypass network restrictions.
The project implements a transparent proxy gateway capable of intercepting outbound packets at the network layer, allowing system traffic to be redirected through the encrypted tunnel without per-application configuration. It also includes a daemon process manager to control multiple proxy server instances as child processes via local communication sockets.
The system covers a broad range of traffic management capabilities, including local port forwarding, encryption tunnel multiplexing, and the encapsulation of UDP datagrams within TCP streams. Access is managed through IP-based access control lists that permit or block client connections.
Features
- SOCKS5 Proxies - Implements an encrypted proxy server that uses the SOCKS5 protocol to route TCP and UDP traffic.
- Shadowsocks Tunnel Implementations - Implements the Shadowsocks protocol to encrypt and tunnel TCP and UDP traffic through a SOCKS5 proxy.
- Event-Driven Networking - Functions as a high-performance network daemon using an event-driven model for concurrent connections.
- UDP Tunneling - Provides encapsulation and redirection of UDP traffic through encrypted proxy connections.
- Non-Blocking Socket I/O - Uses asynchronous non-blocking socket I/O to handle high concurrency without thread-per-connection overhead.
- TCP Tunneling - Implements wrapping of TCP streams in custom encrypted protocols to bypass network restrictions.
- Traffic Encryption - Encrypts internet traffic in transit using specific ciphers to bypass network censorship.
- Configurable Cipher Encryptors - Provides configurable cipher methods to encrypt network traffic and bypass network restrictions.
- Non-Blocking Event Loops - Employs a non-blocking event loop architecture via libev to manage concurrent network operations.
- Local Port Mapping - Maps local ports to specific destination server addresses to tunnel traffic to remote targets.
- UDP-over-TCP Encapsulations - Wraps UDP datagrams inside TCP streams to ensure reliable delivery when native UDP is blocked.
- Transparent Network Proxies - Functions as a network-layer interceptor that redirects system traffic transparently through an encrypted tunnel.
- Transparent Proxies - Intercepts network traffic at the system layer to route it through the proxy without client configuration.
- Transparent Proxying - Intercepts and redirects outbound network traffic through the proxy without requiring client-side configuration.
- Session Multiplexers - Multiplexes multiple TCP and UDP proxy sessions over a single encrypted tunnel using a shared cipher context.
