SagerNet/sing-box
Sing Box
Sing-box is a universal proxy engine and traffic router designed to manage complex network connectivity across multiple operating systems. It functions as a configuration-driven core that intercepts system-level traffic, allowing for transparent proxying through encrypted tunnels. By normalizing diverse network protocols into a unified interface, the engine enables consistent traffic forwarding and protocol translation regardless of the underlying environment.
The project distinguishes itself through a declarative configuration pipeline that validates and merges modular settings into a unified internal state before execution. It employs a rule-based traffic dispatcher that evaluates incoming packets against hierarchical criteria to determine optimal routing paths dynamically. This is complemented by an asynchronous domain name resolution pipeline, which provides granular control over how network requests are mapped and filtered, ensuring that traffic handling remains both accurate and performant.
Beyond its core routing capabilities, the platform includes a comprehensive security layer for managing encrypted connections, including support for advanced handshake options and certificate validation. It also provides tools for monitoring real-time traffic and connection status, alongside flexible management of routing rule sets that can be sourced from local or remote locations. The software is designed to be installed as a background service, providing a stable and scalable infrastructure for controlled network communication.
Features
- Proxy Engines - Manages complex traffic forwarding, protocol translation, and secure tunnel establishment across operating systems.
- Network Traffic Routers - Directs traffic through multiple protocols and configurations using a universal engine designed for flexible connectivity.
- Network Tunnels - Intercepts and redirects device traffic through encrypted proxy protocols for private connectivity.
- Traffic Routing Engines - Evaluates network packets against custom rules to determine optimal paths and connection handling.
- System Tunneling - Routes device traffic through secure remote tunnels to provide transparent proxying for all applications.
- Traffic Dispatchers - Evaluates incoming network packets against hierarchical criteria to determine the optimal outbound path dynamically.
- Encrypted Connection Handlers - Manages TLS handshakes and certificate validation to protect data transit between endpoints.
- Virtual Network Tunnels - Intercepts system-level traffic by routing packets through a virtual network interface to enable transparent proxying.
- Advanced Traffic Routing - Directs network requests to specific destinations based on complex domain and protocol rules.
- Cross-Platform Tunneling - Implements transparent proxying across mobile and desktop platforms to secure device traffic.
- DNS Pipelines - Processes domain name resolution requests through a non-blocking chain of filters and caches to optimize lookup performance.
- DNS Resolution Managers - Defines servers, routing rules, and caching strategies to map domain names to IP addresses effectively.
- Secure Proxy Infrastructure - Manages encrypted proxy connections with support for multiple protocols and advanced TLS configurations.
- Network Proxy Clients - Universal proxy platform with high-performance core capabilities.
- Network Tools - Acts as a universal proxy platform with per-app routing.
- Media & Communication - Universal proxy and network tunneling tool.
- VPN and Proxy Tools - Universal proxy platform supporting multiple protocols.
- DNS Query Routers - Directs domain name queries to specific servers while applying caching and timeout rules to optimize resolution.
- Inbound Connection Managers - Sets up network protocols to receive and process incoming traffic through proxy, tunnel, or direct connections.
- Outbound Connection Managers - Defines proxy protocols and routing rules for traffic leaving the local environment to ensure correct pathing.
- Proxy Abstractions - Normalizes diverse network protocols into a unified internal interface to enable seamless switching between tunneling methods.
- TLS Management - Configures security policies and TLS handshake options to ensure encrypted traffic remains secure.
- Configuration Managers - Validates and formats complex network settings to maintain scalable proxy infrastructure.
- Proxy Profile Managers - Syncs proxy settings from local or remote sources to maintain consistent network behavior.
- DNS Query Evaluators - Sends domain name queries to servers and stores responses for rule matching without terminating the evaluation process.
- DNS Resolution - Controls domain resolution through custom servers, caching strategies, and traffic filtering.
- DNS Responders - Answers domain name queries with predefined records and custom response codes to control how clients resolve addresses.
- DNS Rule Engines - Creates routing rules that match specific traffic patterns and apply custom actions to manage network requests.
- Configuration Management - Merges and validates multiple configuration files into a unified operational structure.
- Default Routing Managers - Sets default network parameters including interface binding and routing marks for traffic that does not match specific rules.
- DNS Query Filters - Drops domain name queries or returns specific error codes based on defined policies to block unwanted traffic.
- Routing Rules - Defines traffic routing criteria to ensure data flows through intended network paths.
- Configuration Pipelines - Parses and validates structural settings into a unified internal state to ensure consistent network behavior.
- Schema Validation Tools - Checks settings for syntax and structural integrity before runtime to prevent service failures.
