windtf/wireproxy
Wireproxy
wireproxy est un client WireGuard en espace utilisateur et une passerelle réseau qui établit des tunnels sécurisés sans nécessiter de privilèges root ou de changements d'interface au niveau du système. Il fonctionne comme un proxy VPN capable d'exposer des connexions WireGuard en tant que proxies SOCKS5 ou HTTP.
Le projet fournit des capacités de routage spécialisées, notamment un proxy TLS SNI qui dirige le trafic chiffré en fonction du Server Name Indication, ainsi qu'une passerelle pour mapper les ports TCP et UDP locaux vers des destinations distantes. Il prend en charge la gestion multi-pairs pour router le trafic entre plusieurs points de terminaison en utilisant des plages IP définies.
Les capacités supplémentaires incluent la résolution de noms d'hôte DNS, l'authentification des requêtes proxy via des en-têtes et le chiffrement TLS pour sécuriser les connexions client-serveur. Le système prend également en charge le routage des flux d'entrée et de sortie standard depuis des commandes pipées à travers des tunnels sécurisés.
L'application peut être intégrée en tant que service système en arrière-plan pour assurer la persistance et la récupération automatique.
Features
- Non-Root Virtual Interfaces - Creates a virtual network interface using private keys without requiring root privileges or kernel-level access.
- User-Space Tunneling - Establishes secure WireGuard tunnels using private keys without requiring root privileges.
- Non-Root VPN Access - Establishes secure encrypted connections to remote networks without requiring administrative permissions to modify system interfaces.
- SNI Proxies - Implements a proxy that routes encrypted traffic by inspecting the Server Name Indication in TLS handshakes.
- SOCKS5 Proxy Tunneling Clients - Implements a SOCKS5 proxy that tunnels network traffic through a secure WireGuard connection.
- WireGuard Proxy Gateways - Translates incoming SOCKS5 proxy requests into encrypted packets for transmission over a WireGuard tunnel.
- WireGuard-to-SOCKS5 Proxies - Tunnels network traffic through WireGuard and exposes the connection as a SOCKS5 or HTTP proxy.
- SNI Routing - Routes TCP streams based on the Server Name Indication field during the TLS handshake over a tunnel.
- Secure Tunnels - Establishes encrypted network bridges to connect multiple remote peers and route traffic via IP ranges.
- WireGuard Key and Routing Management - Manages asymmetric key pairs and IP routing rules to route traffic between multiple WireGuard peers.
- WireGuard VPN Support - Implements secure network tunnels using the WireGuard protocol and exposes them as proxies.
- User-Space Implementations - Provides a network implementation of the WireGuard protocol that runs without root privileges.
- DNS Override Resolvers - Provides DNS resolution that can override system settings to route queries through a secure tunnel.
- UDP Tunneling - Forwards UDP packets from local addresses to remote targets through a secure tunnel.
- IP Range Routing - Directs network traffic to specific peers based on predefined IP address and subnet CIDR rules.
- Local Port Mapping - Maps local listener ports to remote targets by forwarding raw traffic through a secure tunnel.
- Multi-Peer Routing - Allows simultaneous connections to multiple endpoints with traffic routed via defined IP ranges.
- Layer 4 TCP Routing - Directs TCP traffic to specific targets using static routing rules.
- TCP and UDP Forwarders - Forwards raw TCP and UDP packets from local ports to remote destinations through a secure connection.
- Traffic Tunneling - Maps local TCP ports to remote destinations via a secure tunnel.
- HTTP Proxy Forwarders - Provides an HTTP proxy that forwards connections through a secure WireGuard tunnel.
