# windtf/wireproxy

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/windtf-wireproxy).**

5,656 stars · 392 forks · Go · ISC

## Links

- GitHub: https://github.com/windtf/wireproxy
- awesome-repositories: https://awesome-repositories.com/repository/windtf-wireproxy.md

## Topics

`golang` `network` `proxy` `socks5` `socks5-proxy` `vpn` `wireguard` `wireguard-tunnel`

## Description

wireproxy is a user-space WireGuard client and network gateway that establishes secure tunnels without requiring root privileges or system-wide interface changes. It functions as a VPN proxy that can expose WireGuard connections as SOCKS5 or HTTP proxies.

The project provides specialized routing capabilities, including a TLS SNI proxy that directs encrypted traffic based on Server Name Indication and a gateway for mapping local TCP and UDP ports to remote destinations. It supports multi-peer management to route traffic between several endpoints using defined IP ranges.

Additional capabilities include DNS hostname resolution, proxy request authentication via headers, and TLS encryption for securing client-server connections. The system also supports routing standard input and output streams from piped commands through secure tunnels.

The application can be integrated as a background system service to ensure persistence and automatic recovery.

## Tags

### DevOps & Infrastructure

- [Non-Root Virtual Interfaces](https://awesome-repositories.com/f/devops-infrastructure/virtual-network-tunnels/non-root-virtual-interfaces.md) — Creates a virtual network interface using private keys without requiring root privileges or kernel-level access.

### Security & Cryptography

- [User-Space Tunneling](https://awesome-repositories.com/f/security-cryptography/secure-tunneling/user-space-tunneling.md) — Establishes secure WireGuard tunnels using private keys without requiring root privileges. ([source](https://github.com/windtf/wireproxy/blob/master/wireguard.go))

### Networking & Communication

- [Non-Root VPN Access](https://awesome-repositories.com/f/networking-communication/non-root-vpn-access.md) — Establishes secure encrypted connections to remote networks without requiring administrative permissions to modify system interfaces.
- [SNI Proxies](https://awesome-repositories.com/f/networking-communication/proxy-servers/sni-proxies.md) — Implements a proxy that routes encrypted traffic by inspecting the Server Name Indication in TLS handshakes.
- [SOCKS5 Proxy Tunneling Clients](https://awesome-repositories.com/f/networking-communication/socks5-proxies/socks5-proxy-tunneling-clients.md) — Implements a SOCKS5 proxy that tunnels network traffic through a secure WireGuard connection. ([source](https://github.com/windtf/wireproxy/blob/master/go.sum))
- [WireGuard Proxy Gateways](https://awesome-repositories.com/f/networking-communication/socks5-proxies/socks5-proxy-tunneling-clients/wireguard-proxy-gateways.md) — Translates incoming SOCKS5 proxy requests into encrypted packets for transmission over a WireGuard tunnel.
- [WireGuard-to-SOCKS5 Proxies](https://awesome-repositories.com/f/networking-communication/socks5-proxies/wireguard-to-socks5-proxies.md) — Tunnels network traffic through WireGuard and exposes the connection as a SOCKS5 or HTTP proxy.
- [SNI Routing](https://awesome-repositories.com/f/networking-communication/tcp-proxies/sni-routing.md) — Routes TCP streams based on the Server Name Indication field during the TLS handshake over a tunnel.
- [Secure Tunnels](https://awesome-repositories.com/f/networking-communication/traffic-routing/secure-tunnels.md) — Establishes encrypted network bridges to connect multiple remote peers and route traffic via IP ranges.
- [WireGuard Key and Routing Management](https://awesome-repositories.com/f/networking-communication/vpn-infrastructure/wireguard-management/wireguard-key-and-routing-management.md) — Manages asymmetric key pairs and IP routing rules to route traffic between multiple WireGuard peers.
- [WireGuard VPN Support](https://awesome-repositories.com/f/networking-communication/wireguard-vpn-support.md) — Implements secure network tunnels using the WireGuard protocol and exposes them as proxies.
- [User-Space Implementations](https://awesome-repositories.com/f/networking-communication/wireguard-vpn-support/user-space-implementations.md) — Provides a network implementation of the WireGuard protocol that runs without root privileges.
- [DNS Override Resolvers](https://awesome-repositories.com/f/networking-communication/dns-resolution/dns-override-resolvers.md) — Provides DNS resolution that can override system settings to route queries through a secure tunnel.
- [UDP Tunneling](https://awesome-repositories.com/f/networking-communication/network-infrastructure-routing/network-proxying-tools/network-proxies/udp-tunneling.md) — Forwards UDP packets from local addresses to remote targets through a secure tunnel. ([source](https://github.com/windtf/wireproxy/blob/master/udp_proxy.go))
- [IP Range Routing](https://awesome-repositories.com/f/networking-communication/network-policy-enforcement/ip-range-routing.md) — Directs network traffic to specific peers based on predefined IP address and subnet CIDR rules.
- [Local Port Mapping](https://awesome-repositories.com/f/networking-communication/network-port-forwarding/local-port-mapping.md) — Maps local listener ports to remote targets by forwarding raw traffic through a secure tunnel.
- [Multi-Peer Routing](https://awesome-repositories.com/f/networking-communication/peer-to-peer-tunneling/multi-peer-routing.md) — Allows simultaneous connections to multiple endpoints with traffic routed via defined IP ranges. ([source](https://github.com/windtf/wireproxy/blob/master/README.md))
- [Layer 4 TCP Routing](https://awesome-repositories.com/f/networking-communication/traffic-routing/layer-4-tcp-routing.md) — Directs TCP traffic to specific targets using static routing rules. ([source](https://github.com/windtf/wireproxy#readme))
- [TCP and UDP Forwarders](https://awesome-repositories.com/f/networking-communication/traffic-routing/tcp-and-udp-forwarders.md) — Forwards raw TCP and UDP packets from local ports to remote destinations through a secure connection.
- [Traffic Tunneling](https://awesome-repositories.com/f/networking-communication/traffic-tunneling.md) — Maps local TCP ports to remote destinations via a secure tunnel. ([source](https://github.com/windtf/wireproxy/blob/master/README.md))
- [HTTP Proxy Forwarders](https://awesome-repositories.com/f/networking-communication/traffic-tunneling/http-tunneled-socks-proxies/http-proxy-forwarders.md) — Provides an HTTP proxy that forwards connections through a secure WireGuard tunnel. ([source](https://github.com/windtf/wireproxy/blob/master/http.go))