SOCKS5 Servers - Presents a standard SOCKS5 interface on the local machine for any SOCKS5-aware application to route traffic through the encrypted tunnel.
Tunneling Server Deployments - Sets up a Shadowsocks server on a cloud-hosted Linux machine to route traffic through an encrypted tunnel.
Shadowsocks Server Managers - A lightweight encrypted proxy server written in Rust for bypassing network restrictions.
Proxy Connection Configurations - Configures tunnel proxy with server address, port, password, and encryption method in a JSON file.
UDP Tunneling - Encrypts outbound UDP datagrams at the local proxy and decrypts them at the remote proxy for forwarding to the destination.
Encrypted Datagram Transmitters - Encrypts each UDP packet independently with a random salt and fixed nonce for out-of-order processing.
SOCKS5 Proxies - Accepts connections on a local SOCKS5 port and relays them through the encrypted tunnel to the destination.
SOCKS5 Proxy Tunneling Clients - Accepts local SOCKS5 connections and routes traffic through an encrypted tunnel to a remote server.
TCP Tunneling - Encrypts outbound TCP streams at the local proxy and decrypts them at the remote proxy for forwarding to the destination.
AEAD Encrypted Proxies - Encrypts TCP proxy streams using AEAD ciphers with per-session subkeys derived from a pre-shared key and random salt.
Encrypted Stream Handlers - Splits TCP connections into encrypted chunks with length, authentication tags, and a counting nonce.
Traffic Tunneling - Encrypts and forwards network traffic through a remote server to bypass firewalls and hide the client's IP address.
Session ID-Based UDP Routers - Routes incoming UDP packets based on the client session ID rather than source address for network change resilience.
Authenticated Encryption - Encrypts tunnel data using authenticated encryption that provides confidentiality, integrity, and authenticity in one operation.
Encrypted Tunneling - Provides encrypted tunneling to bypass network restrictions and hide the client's IP address.
AEAD-2022 Cipher Suites - Encrypts proxy traffic using modern authenticated encryption with per-session subkeys and replay protection for TCP and UDP.
AEAD Cipher Implementations - Encrypts TCP and UDP traffic using AEAD ciphers like chacha20-poly1305 and aes-256-gcm.
AEAD-2022 Cipher Suites - Implements the AEAD-2022 cipher suite for encrypting proxy traffic with per-session subkeys.
Session Key Derivation - Generates a unique per-session subkey from a shared master key using HKDF-SHA1 with a random salt.
Configurable Cipher Encryptors - Encrypts tunnel traffic using AEAD ciphers like chacha20-ietf-poly1305 or aes-256-gcm for integrity and authenticity.
Traffic Obfuscation - Implements traffic obfuscation by making proxy traffic indistinguishable from random bytes to evade deep packet inspection.
TCP Stream Replay Protections - Implements TCP replay attack prevention by storing incoming salts and rejecting duplicates with out-of-range timestamps.
UDP Session Replay Protections - Implements UDP replay attack prevention using a sliding window filter per relay session to reject duplicate packet IDs.
Proxy DNS Routers - Intercepts DNS queries and forwards them through the encrypted tunnel to a remote DNS server.
HTTP Proxies - Runs an HTTP proxy using the CONNECT method to support standard HTTP clients.
DNS Proxy Bridges - Intercepts plaintext DNS queries and forwards them over encrypted upstream connections.
Live Config Managers - Supports multiple users on a single port with live configuration updates and per-user monitoring.
RFC1929 Authentication - Implements RFC1929 username/password authentication for SOCKS5 connections.
TUN Mode Integration - Creates a virtual network interface that routes all system traffic through the proxy for full-device coverage.
SOCKS5 User Authentication - Authenticates SOCKS5 users with username and password verification against a configuration file.
Lightweight Proxies - Runs a minimal-footprint proxy server suitable for embedded devices and low-end hardware.
Transparent Proxy Forwarders - Intercepts network traffic at the system level using firewall rules and redirects it through the encrypted tunnel without client configuration.
HTTP Proxy Forwarders - Accepts HTTP and HTTPS connections on a local port and forwards them through the encrypted tunnel.
Transparent Network Proxies - Intercepts and redirects network traffic at the system level using firewall rules, requiring no client configuration.
Transparent Proxying - Intercepts system-level traffic via firewall rules or TUN interface for transparent proxy redirection.
Firewall Redirection - Intercepts system-level traffic via firewall rules and redirects it through the encrypted tunnel.
TUN Interface Proxies - Creates a virtual network interface that routes all system traffic through the encrypted tunnel for full-device coverage.
Encrypted Session Relays - Relays UDP packets over sessions identified by a unique session ID, encrypting each with a session-specific subkey.
Session-Based Relays - Relays UDP packets over session-based tunnels with per-session encryption and replay protection.
Session-Based UDP Relays - Relays UDP packets over session-based tunnels with per-session encryption and replay protection.
TUN Interface Routing - Creates a virtual TUN interface that routes all system traffic through the encrypted tunnel.
Proxy Configuration Encoders - Encodes proxy server details into a BASE64 URI for quick mobile client setup via scanning.
Access Control Lists - Provides access control lists to block or allow traffic to specific destinations based on rules defined in an ACL file.
Replay Prevention Salts - Prevents replay attacks on TCP streams by storing incoming salts and checking timestamps.
Base64 Key Generators - Creates secure, Base64-encoded keys of the correct length for a specified encryption method.
Proxy Management - Manages multiple proxy users by starting, stopping, listing, and monitoring individual proxy server instances.
SOCKS5 Authenticators - Requires username and password authentication for SOCKS5 connections using the standard RFC1929 protocol.
AEAD-2022 Cipher Encryptors - Encrypts tunnel traffic using AEAD-2022 ciphers with keys generated from a secure command-line tool.
Proxy User Managers - Supports multiple proxy users on a single port with live configuration updates and monitoring.
Server Instance Managers - Manages multiple proxy server instances in a single process via a management API for live config updates and monitoring.
Proxy Instance Managers - Provides a management API to start, stop, list, and monitor multiple proxy server instances.