awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
shadowsocks avatar

shadowsocks/shadowsocks-rust

0
View on GitHub↗
shadowsocks.org↗

Shadowsocks Rust

A Rust port of shadowsocks

Features

  • SOCKS5 Servers - Presents a standard SOCKS5 interface on the local machine for any SOCKS5-aware application to route traffic through the encrypted tunnel.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI
  • Tunneling Server Deployments - Sets up a Shadowsocks server on a cloud-hosted Linux machine to route traffic through an encrypted tunnel.
  • Shadowsocks Server Managers - A lightweight encrypted proxy server written in Rust for bypassing network restrictions.
  • Proxy Connection Configurations - Configures tunnel proxy with server address, port, password, and encryption method in a JSON file.
  • UDP Tunneling - Encrypts outbound UDP datagrams at the local proxy and decrypts them at the remote proxy for forwarding to the destination.
  • Encrypted Datagram Transmitters - Encrypts each UDP packet independently with a random salt and fixed nonce for out-of-order processing.
  • SOCKS5 Proxies - Accepts connections on a local SOCKS5 port and relays them through the encrypted tunnel to the destination.
  • SOCKS5 Proxy Tunneling Clients - Accepts local SOCKS5 connections and routes traffic through an encrypted tunnel to a remote server.
  • TCP Tunneling - Encrypts outbound TCP streams at the local proxy and decrypts them at the remote proxy for forwarding to the destination.
  • AEAD Encrypted Proxies - Encrypts TCP proxy streams using AEAD ciphers with per-session subkeys derived from a pre-shared key and random salt.
  • Encrypted Stream Handlers - Splits TCP connections into encrypted chunks with length, authentication tags, and a counting nonce.
  • Traffic Tunneling - Encrypts and forwards network traffic through a remote server to bypass firewalls and hide the client's IP address.
  • Session ID-Based UDP Routers - Routes incoming UDP packets based on the client session ID rather than source address for network change resilience.
  • Authenticated Encryption - Encrypts tunnel data using authenticated encryption that provides confidentiality, integrity, and authenticity in one operation.
  • Encrypted Tunneling - Provides encrypted tunneling to bypass network restrictions and hide the client's IP address.
  • AEAD-2022 Cipher Suites - Encrypts proxy traffic using modern authenticated encryption with per-session subkeys and replay protection for TCP and UDP.
  • AEAD Cipher Implementations - Encrypts TCP and UDP traffic using AEAD ciphers like chacha20-poly1305 and aes-256-gcm.
  • AEAD-2022 Cipher Suites - Implements the AEAD-2022 cipher suite for encrypting proxy traffic with per-session subkeys.
  • Session Key Derivation - Generates a unique per-session subkey from a shared master key using HKDF-SHA1 with a random salt.
  • Configurable Cipher Encryptors - Encrypts tunnel traffic using AEAD ciphers like chacha20-ietf-poly1305 or aes-256-gcm for integrity and authenticity.
  • Traffic Obfuscation - Implements traffic obfuscation by making proxy traffic indistinguishable from random bytes to evade deep packet inspection.
  • TCP Stream Replay Protections - Implements TCP replay attack prevention by storing incoming salts and rejecting duplicates with out-of-range timestamps.
  • UDP Session Replay Protections - Implements UDP replay attack prevention using a sliding window filter per relay session to reject duplicate packet IDs.
  • Proxy DNS Routers - Intercepts DNS queries and forwards them through the encrypted tunnel to a remote DNS server.
  • HTTP Proxies - Runs an HTTP proxy using the CONNECT method to support standard HTTP clients.
  • DNS Proxy Bridges - Intercepts plaintext DNS queries and forwards them over encrypted upstream connections.
  • Live Config Managers - Supports multiple users on a single port with live configuration updates and per-user monitoring.
  • RFC1929 Authentication - Implements RFC1929 username/password authentication for SOCKS5 connections.
  • TUN Mode Integration - Creates a virtual network interface that routes all system traffic through the proxy for full-device coverage.
  • Proxy Configuration Standards - Implements standard URL and JSON formats for sharing proxy server configurations.
  • SOCKS5 User Authentication - Authenticates SOCKS5 users with username and password verification against a configuration file.
  • Lightweight Proxies - Runs a minimal-footprint proxy server suitable for embedded devices and low-end hardware.
  • Transparent Proxy Forwarders - Intercepts network traffic at the system level using firewall rules and redirects it through the encrypted tunnel without client configuration.
  • HTTP Proxy Forwarders - Accepts HTTP and HTTPS connections on a local port and forwards them through the encrypted tunnel.
  • Transparent Network Proxies - Intercepts and redirects network traffic at the system level using firewall rules, requiring no client configuration.
  • Transparent Proxying - Intercepts system-level traffic via firewall rules or TUN interface for transparent proxy redirection.
  • Firewall Redirection - Intercepts system-level traffic via firewall rules and redirects it through the encrypted tunnel.
  • TUN Interface Proxies - Creates a virtual network interface that routes all system traffic through the encrypted tunnel for full-device coverage.
  • Encrypted Session Relays - Relays UDP packets over sessions identified by a unique session ID, encrypting each with a session-specific subkey.
  • Session-Based Relays - Relays UDP packets over session-based tunnels with per-session encryption and replay protection.
  • Session-Based UDP Relays - Relays UDP packets over session-based tunnels with per-session encryption and replay protection.
  • TUN Interface Routing - Creates a virtual TUN interface that routes all system traffic through the encrypted tunnel.
  • Proxy Configuration Encoders - Encodes proxy server details into a BASE64 URI for quick mobile client setup via scanning.
  • Access Control Lists - Provides access control lists to block or allow traffic to specific destinations based on rules defined in an ACL file.
  • Replay Prevention Salts - Prevents replay attacks on TCP streams by storing incoming salts and checking timestamps.
  • Base64 Key Generators - Creates secure, Base64-encoded keys of the correct length for a specified encryption method.
  • Proxy Management - Manages multiple proxy users by starting, stopping, listing, and monitoring individual proxy server instances.
  • SOCKS5 Authenticators - Requires username and password authentication for SOCKS5 connections using the standard RFC1929 protocol.
  • AEAD-2022 Cipher Encryptors - Encrypts tunnel traffic using AEAD-2022 ciphers with keys generated from a secure command-line tool.
  • Proxy User Managers - Supports multiple proxy users on a single port with live configuration updates and monitoring.
  • Server Instance Managers - Manages multiple proxy server instances in a single process via a management API for live config updates and monitoring.
  • Proxy Instance Managers - Provides a management API to start, stop, list, and monitor multiple proxy server instances.
  • 10,729 stars·1,435 forks·Rust·MIT·19 views

    Star history

    Star history chart for shadowsocks/shadowsocks-rustStar history chart for shadowsocks/shadowsocks-rust

    How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

    Projects sharing features with Shadowsocks Rust

    These projects share indexed features with Shadowsocks Rust. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
    • fw876/helloworldfw876 avatar

      fw876/helloworld

      4,165View on GitHub↗

      This project is a censorship circumvention tool and transparent proxy gateway designed to bypass local network restrictions. It functions as a SOCKS5 proxy server, a DNS tunneling tool, and a network traffic obfuscator to help users access blocked websites. The software implements masking protocols to hide the origin and destination of data to evade restrictive firewalls. It provides capabilities for network traffic obfuscation and secure DNS tunneling to protect network privacy and resolve blocked domains. The system handles wide-scale traffic management by intercepting system network traff

      C
      View on GitHub↗4,165
    • shadowsocks/shadowsocks-libevshadowsocks avatar

      shadowsocks/shadowsocks-libev

      16,180View on GitHub↗

      shadowsocks-libev is an event-driven network daemon that provides an encrypted SOCKS5 proxy. It functions as a lightweight proxy server using a non-blocking event loop to route TCP and UDP traffic through encrypted tunnels to bypass network restrictions. The project implements a transparent proxy gateway capable of intercepting outbound packets at the network layer, allowing system traffic to be redirected through the encrypted tunnel without per-application configuration. It also includes a daemon process manager to control multiple proxy server instances as child processes via local communi

      Ccshadowsocks
      View on GitHub↗16,180
    • ginuerzh/gostginuerzh avatar

      ginuerzh/gost

      18,019View on GitHub↗

      gost is a multi-protocol proxy tunnel and secure tunneling server designed to route network traffic through encrypted connections. It functions as a traffic obfuscation gateway and a transparent proxy server capable of intercepting TCP and UDP traffic at the IP level. The project also includes a virtual network interface manager for creating TUN and TAP devices to intercept operating system packets. The system distinguishes itself through a chain-based request routing model, allowing traffic to pass through an ordered sequence of proxy nodes. It provides extensive transport-layer encapsulatio

      Godnsgogolang
      View on GitHub↗18,019
    • p4gefau1t/trojan-gop4gefau1t avatar

      p4gefau1t/trojan-go

      8,385View on GitHub↗

      Trojan-go is a network proxy implementation that uses the Trojan protocol to disguise internet traffic as standard TLS to bypass censorship and deep packet inspection. It functions as a tunneling gateway that encapsulates network data within encrypted tunnels to mimic ordinary web browsing. The project distinguishes itself through advanced obfuscation techniques, including TLS fingerprint mimicry to avoid detection by client signature identification and the use of WebSockets to relay encrypted traffic through content delivery networks. It also supports UDP forwarding through the Trojan protoc

      Goanticensorshipchinagfw
      View on GitHub↗8,385
    Compare all 30 related projects→

    Frequently asked questions

    What does shadowsocks/shadowsocks-rust do?

    A Rust port of shadowsocks

    What are the main features of shadowsocks/shadowsocks-rust?

    The main features of shadowsocks/shadowsocks-rust are: SOCKS5 Servers, Tunneling Server Deployments, Shadowsocks Server Managers, Proxy Connection Configurations, UDP Tunneling, Encrypted Datagram Transmitters, SOCKS5 Proxies, SOCKS5 Proxy Tunneling Clients.

    Which projects share features with shadowsocks/shadowsocks-rust?

    Projects with overlapping indexed features include: fw876/helloworld — This project is a censorship circumvention tool and transparent proxy gateway designed to bypass local network… shadowsocks/shadowsocks-libev — shadowsocks-libev is an event-driven network daemon that provides an encrypted SOCKS5 proxy. It functions as a… ginuerzh/gost — gost is a multi-protocol proxy tunnel and secure tunneling server designed to route network traffic through encrypted… p4gefau1t/trojan-go — Trojan-go is a network proxy implementation that uses the Trojan protocol to disguise internet traffic as standard TLS… clown-coding/vpn — This project is a toolset for automated VPN installation, proxy server management, and server-side network throughput… romanvht/byebyedpi — ByeByeDPI is a network utility designed to circumvent regional blocking and censorship by evading deep packet…