windtf/wireproxy
Wireproxy
wireproxy is a user-space WireGuard client and network gateway that establishes secure tunnels without requiring root privileges or system-wide interface changes. It functions as a VPN proxy that can expose WireGuard connections as SOCKS5 or HTTP proxies.
The project provides specialized routing capabilities, including a TLS SNI proxy that directs encrypted traffic based on Server Name Indication and a gateway for mapping local TCP and UDP ports to remote destinations. It supports multi-peer management to route traffic between several endpoints using defined IP ranges.
Additional capabilities include DNS hostname resolution, proxy request authentication via headers, and TLS encryption for securing client-server connections. The system also supports routing standard input and output streams from piped commands through secure tunnels.
The application can be integrated as a background system service to ensure persistence and automatic recovery.
Features
- Non-Root Virtual Interfaces - Creates a virtual network interface using private keys without requiring root privileges or kernel-level access.
- User-Space Tunneling - Establishes secure WireGuard tunnels using private keys without requiring root privileges.
- Non-Root VPN Access - Establishes secure encrypted connections to remote networks without requiring administrative permissions to modify system interfaces.
- SNI Proxies - Implements a proxy that routes encrypted traffic by inspecting the Server Name Indication in TLS handshakes.
- SOCKS5 Proxy Tunneling Clients - Implements a SOCKS5 proxy that tunnels network traffic through a secure WireGuard connection.
- WireGuard Proxy Gateways - Translates incoming SOCKS5 proxy requests into encrypted packets for transmission over a WireGuard tunnel.
- WireGuard-to-SOCKS5 Proxies - Tunnels network traffic through WireGuard and exposes the connection as a SOCKS5 or HTTP proxy.
- SNI Routing - Routes TCP streams based on the Server Name Indication field during the TLS handshake over a tunnel.
- Secure Tunnels - Establishes encrypted network bridges to connect multiple remote peers and route traffic via IP ranges.
- WireGuard Key and Routing Management - Manages asymmetric key pairs and IP routing rules to route traffic between multiple WireGuard peers.
- WireGuard VPN Support - Implements secure network tunnels using the WireGuard protocol and exposes them as proxies.
- User-Space Implementations - Provides a network implementation of the WireGuard protocol that runs without root privileges.
- DNS Override Resolvers - Provides DNS resolution that can override system settings to route queries through a secure tunnel.
- UDP Tunneling - Forwards UDP packets from local addresses to remote targets through a secure tunnel.
- IP Range Routing - Directs network traffic to specific peers based on predefined IP address and subnet CIDR rules.
- Local Port Mapping - Maps local listener ports to remote targets by forwarding raw traffic through a secure tunnel.
- Multi-Peer Routing - Allows simultaneous connections to multiple endpoints with traffic routed via defined IP ranges.
- Layer 4 TCP Routing - Directs TCP traffic to specific targets using static routing rules.
- TCP and UDP Forwarders - Forwards raw TCP and UDP packets from local ports to remote destinations through a secure connection.
- Traffic Tunneling - Maps local TCP ports to remote destinations via a secure tunnel.
- HTTP Proxy Forwarders - Provides an HTTP proxy that forwards connections through a secure WireGuard tunnel.
