windtf/wireproxy
Wireproxy
wireproxy es un cliente WireGuard y gateway de red en espacio de usuario que establece túneles seguros sin requerir privilegios de root ni cambios en la interfaz a nivel de sistema. Funciona como un proxy VPN que puede exponer conexiones WireGuard como proxies SOCKS5 o HTTP.
El proyecto proporciona capacidades de enrutamiento especializadas, incluyendo un proxy TLS SNI que dirige el tráfico cifrado basado en Server Name Indication y un gateway para mapear puertos TCP y UDP locales a destinos remotos. Admite la gestión de múltiples pares (multi-peer) para enrutar el tráfico entre varios endpoints utilizando rangos de IP definidos.
Las capacidades adicionales incluyen resolución de nombres de host DNS, autenticación de solicitudes de proxy mediante cabeceras y cifrado TLS para asegurar las conexiones cliente-servidor. El sistema también admite el enrutamiento de flujos de entrada y salida estándar desde comandos canalizados (piped) a través de túneles seguros.
La aplicación puede integrarse como un servicio de sistema en segundo plano para asegurar la persistencia y la recuperación automática.
Features
- Non-Root Virtual Interfaces - Creates a virtual network interface using private keys without requiring root privileges or kernel-level access.
- User-Space Tunneling - Establishes secure WireGuard tunnels using private keys without requiring root privileges.
- Non-Root VPN Access - Establishes secure encrypted connections to remote networks without requiring administrative permissions to modify system interfaces.
- SNI Proxies - Implements a proxy that routes encrypted traffic by inspecting the Server Name Indication in TLS handshakes.
- SOCKS5 Proxy Tunneling Clients - Implements a SOCKS5 proxy that tunnels network traffic through a secure WireGuard connection.
- WireGuard Proxy Gateways - Translates incoming SOCKS5 proxy requests into encrypted packets for transmission over a WireGuard tunnel.
- WireGuard-to-SOCKS5 Proxies - Tunnels network traffic through WireGuard and exposes the connection as a SOCKS5 or HTTP proxy.
- SNI Routing - Routes TCP streams based on the Server Name Indication field during the TLS handshake over a tunnel.
- Secure Tunnels - Establishes encrypted network bridges to connect multiple remote peers and route traffic via IP ranges.
- WireGuard Key and Routing Management - Manages asymmetric key pairs and IP routing rules to route traffic between multiple WireGuard peers.
- WireGuard VPN Support - Implements secure network tunnels using the WireGuard protocol and exposes them as proxies.
- User-Space Implementations - Provides a network implementation of the WireGuard protocol that runs without root privileges.
- DNS Override Resolvers - Provides DNS resolution that can override system settings to route queries through a secure tunnel.
- UDP Tunneling - Forwards UDP packets from local addresses to remote targets through a secure tunnel.
- IP Range Routing - Directs network traffic to specific peers based on predefined IP address and subnet CIDR rules.
- Local Port Mapping - Maps local listener ports to remote targets by forwarding raw traffic through a secure tunnel.
- Multi-Peer Routing - Allows simultaneous connections to multiple endpoints with traffic routed via defined IP ranges.
- Layer 4 TCP Routing - Directs TCP traffic to specific targets using static routing rules.
- TCP and UDP Forwarders - Forwards raw TCP and UDP packets from local ports to remote destinations through a secure connection.
- Traffic Tunneling - Maps local TCP ports to remote destinations via a secure tunnel.
- HTTP Proxy Forwarders - Provides an HTTP proxy that forwards connections through a secure WireGuard tunnel.
