# daeuniverse/dae

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/daeuniverse-dae).**

5,876 stars · 376 forks · Go · AGPL-3.0

## Links

- GitHub: https://github.com/daeuniverse/dae
- awesome-repositories: https://awesome-repositories.com/repository/daeuniverse-dae.md

## Topics

`dae` `ebpf` `golang` `policy-routing` `sdwan` `shadowsocks` `transparent-proxy` `v2ray`

## Description

dae is a high-performance Linux network tool that functions as an eBPF transparent proxy. It intercepts and redirects packets at the kernel level to route internet traffic based on domains, IP addresses, and process names.

The project distinguishes itself by modifying TLS handshakes to simulate browser signatures, which prevents server-side detection of proxy traffic. It also implements a full-cone network address translation gateway to maintain stable bidirectional connections and utilizes a latency-based node selector to automatically route traffic through the fastest available proxy nodes.

Broad capabilities include multi-protocol proxy management, advanced DNS traffic control to prevent pollution, and network filtering using geo-IP databases and domain lists. The system further optimizes performance by forwarding non-proxied traffic through kernel-stage Layer 3 routing to minimize transitions between kernel and user space.

## Tags

### Networking & Communication

- [eBPF Interceptors](https://awesome-repositories.com/f/networking-communication/traffic-interception-tools/ebpf-interceptors.md) — Implements eBPF-based kernel interception to transparently redirect network traffic.
- [Transparent Network Proxies](https://awesome-repositories.com/f/networking-communication/transparent-network-proxies.md) — Functions as a high-performance transparent network proxy using eBPF for kernel-level packet interception.
- [Domain-Based DNS Query Blockings](https://awesome-repositories.com/f/networking-communication/dns-query-interceptors/domain-based-dns-query-blockings.md) — Intercepts DNS requests to associate domain names with destination IP addresses for precise routing. ([source](https://github.com/daeuniverse/dae/blob/main/docs/en/how-it-works.md))
- [DNS Query Routers](https://awesome-repositories.com/f/networking-communication/dns-query-routers.md) — Routes DNS queries to specific upstream servers based on query type or response source. ([source](https://github.com/daeuniverse/dae/blob/main/docs/en/README.md))
- [Layer 3 Packet Forwarders](https://awesome-repositories.com/f/networking-communication/layer-3-packet-forwarders.md) — Routes non-proxied traffic directly via kernel-level Layer 3 forwarding to minimize overhead.
- [Connection Access Filters](https://awesome-repositories.com/f/networking-communication/network-reliability-diagnostics/network-filtering/connection-access-filters.md) — Provides connection access filters using geo-IP databases and domain lists to control data access.
- [Network Traffic Routers](https://awesome-repositories.com/f/networking-communication/network-traffic-routers.md) — Splits and routes internet traffic based on complex criteria including process names and destination domains.
- [Network Traffic Routing](https://awesome-repositories.com/f/networking-communication/network-traffic-routing.md) — Directs internet traffic through custom network paths based on domain names, IP addresses, and process identities.
- [Latency-Based Path Selection](https://awesome-repositories.com/f/networking-communication/network-traffic-routing/latency-based-path-selection.md) — Automatically selects the lowest-latency proxy node by testing real-time TCP and UDP performance.
- [Outbound Connection Managers](https://awesome-repositories.com/f/networking-communication/outbound-connection-managers.md) — Manages outbound connections by chaining multiple communication protocols to remote servers. ([source](https://github.com/daeuniverse/dae/blob/main/CHANGELOGS.md))
- [Proxy Tunnels](https://awesome-repositories.com/f/networking-communication/proxy-tunnels.md) — Redirects network traffic through local or remote proxy services using secure tunnels. ([source](https://github.com/daeuniverse/dae#readme))
- [Traffic Interception](https://awesome-repositories.com/f/networking-communication/traffic-interception.md) — Transparently intercepts network packets to route them through proxy protocols or direct connections. ([source](https://github.com/daeuniverse/dae/blob/main/CHANGELOGS.md))
- [Traffic Proxying](https://awesome-repositories.com/f/networking-communication/traffic-proxying.md) — Forwards intercepted traffic through proxy protocols to obscure or redirect original connections. ([source](https://github.com/daeuniverse/dae/blob/main/docs/en/proxy-protocols.md))
- [Traffic Routing](https://awesome-repositories.com/f/networking-communication/traffic-routing.md) — Splits network traffic into different paths based on domains, IP addresses, ports, or protocols. ([source](https://github.com/daeuniverse/dae/blob/main/docs/en/how-it-works.md))
- [Traffic Routing Rules](https://awesome-repositories.com/f/networking-communication/traffic-routing-rules.md) — Uses system filters to apply kernel-level routing rules based on process names or MAC addresses. ([source](https://github.com/daeuniverse/dae/blob/main/docker-compose.yml))
- [Source-Based Routing](https://awesome-repositories.com/f/networking-communication/traffic-routing-rules/source-based-routing.md) — Applies different routing rules based on local process names or MAC addresses. ([source](https://github.com/daeuniverse/dae/blob/main/README.md))
- [Connection and Latency Optimizers](https://awesome-repositories.com/f/networking-communication/connection-and-latency-optimizers.md) — Optimizes network performance by automatically selecting the lowest-latency path using real-time TCP and UDP metrics.
- [DNS Override Resolvers](https://awesome-repositories.com/f/networking-communication/dns-resolution/dns-override-resolvers.md) — Intercepts system DNS queries and routes them through proxy tunnels to prevent leaks. ([source](https://github.com/daeuniverse/dae/blob/main/README.md))
- [Multi-Protocol DNS Resolvers](https://awesome-repositories.com/f/networking-communication/dns-servers/multi-protocol-encrypted-dns-clients/multi-protocol-dns-resolvers.md) — Processes domain queries using diverse protocols with fallback servers for optimal routing.
- [User-Space Domain Sniffing](https://awesome-repositories.com/f/networking-communication/domain-extraction-parsers/user-space-domain-sniffing.md) — Retrieves original domain names from proxied traffic in user space to bypass DNS pollution.
- [Next-Hop Node Selection](https://awesome-repositories.com/f/networking-communication/exit-node-routing/next-hop-node-selection.md) — Automatically selects the optimal proxy node by testing TCP and UDP latencies across IPv4 and IPv6. ([source](https://github.com/daeuniverse/dae/blob/main/README.md))
- [Direct Socket-Port Association](https://awesome-repositories.com/f/networking-communication/low-latency-messaging/socket-buffer-management/direct-socket-port-association.md) — Reduces packet processing overhead by associating socket buffers directly with listening ports.
- [DNS Traffic Managers](https://awesome-repositories.com/f/networking-communication/network-infrastructure-routing/network-infrastructure-configuration/network-infrastructure/dns-traffic-managers.md) — Implements advanced DNS resolution rules and query interception to manage traffic and avoid DNS pollution.
- [Network Stack Bypasses](https://awesome-repositories.com/f/networking-communication/network-stack-bypasses.md) — Reduces processing overhead by associating socket buffers directly with listening ports. ([source](https://github.com/daeuniverse/dae/blob/main/docs/en/how-it-works.md))
- [Proxy Node Selection Strategies](https://awesome-repositories.com/f/networking-communication/proxy-node-selection-strategies.md) — Optimizes node selection by testing multiple latency types across a pool of available proxy servers. ([source](https://github.com/daeuniverse/dae#readme))
- [FullCone NAT Mapping](https://awesome-repositories.com/f/networking-communication/udp-proxies/fullcone-nat-mapping.md) — Provides FullCone NAT mapping to ensure stable bidirectional connectivity for UDP traffic.
- [FullCone NAT Support](https://awesome-repositories.com/f/networking-communication/udp-proxies/fullcone-nat-support.md) — Implements full-cone NAT to maintain stable bidirectional connections and support applications requiring open ports. ([source](https://github.com/daeuniverse/dae/blob/main/README.md))

### Security & Cryptography

- [TLS Fingerprint Impersonators](https://awesome-repositories.com/f/security-cryptography/device-fingerprinting/fingerprint-configuration/tls-fingerprinting/tls-fingerprint-impersonators.md) — Simulates browser TLS signatures during handshakes to evade server-side proxy detection.
- [Network Traffic Filtering](https://awesome-repositories.com/f/security-cryptography/network-traffic-filtering.md) — Blocks or allows network connections using geo-IP databases, domain lists, and IP addresses. ([source](https://github.com/daeuniverse/dae/blob/main/docs/en/README.md))
- [Custom DNS Resolvers](https://awesome-repositories.com/f/security-cryptography/encrypted-dns-resolvers/custom-dns-resolvers.md) — Performs domain lookups using multiple protocols with support for fallback servers. ([source](https://github.com/daeuniverse/dae#readme))

### System Administration & Monitoring

- [Multi-Protocol Proxy Managers](https://awesome-repositories.com/f/system-administration-monitoring/administrative-operations/linux-system-administration/networking/proxy-management-systems/multi-protocol-proxy-managers.md) — Manages diverse proxy standards and protocols to obscure or redirect network connections.
- [Real-Time Network Monitors](https://awesome-repositories.com/f/system-administration-monitoring/real-time-network-monitors.md) — Tracks real-time traffic statistics and node latency to optimize active connections. ([source](https://github.com/daeuniverse/dae/blob/main/CHANGELOGS.md))

### Data & Databases

- [Proxy Node Failover](https://awesome-repositories.com/f/data-databases/database-management-systems/database-architectures/active-active-database-clusters/automatic-failover-mechanisms/proxy-node-failover.md) — Automatically switches to backup proxy nodes when the primary connection exceeds latency thresholds. ([source](https://github.com/daeuniverse/dae/blob/main/CHANGELOGS.md))

### Operating Systems & Systems Programming

- [User-Space Domain Sniffing](https://awesome-repositories.com/f/operating-systems-systems-programming/systems-programming/bare-metal-development/tcp-ip-stacks/user-space-implementations/user-space-domain-sniffing.md) — Retrieves original domain names from proxied traffic in user space to bypass DNS pollution. ([source](https://github.com/daeuniverse/dae/blob/main/docs/en/how-it-works.md))