windtf/wireproxy
Wireproxy
wireproxy este un client WireGuard în user-space și un gateway de rețea care stabilește tuneluri securizate fără a necesita privilegii de root sau modificări ale interfeței la nivel de sistem. Funcționează ca un proxy VPN care poate expune conexiunile WireGuard ca proxy-uri SOCKS5 sau HTTP.
Proiectul oferă capabilități de rutare specializate, inclusiv un proxy TLS SNI care direcționează traficul criptat pe baza Server Name Indication și un gateway pentru maparea porturilor TCP și UDP locale către destinații remote. Suportă gestionarea multi-peer pentru a ruta traficul între mai multe endpoint-uri folosind intervale IP definite.
Capabilitățile suplimentare includ rezoluția numelor de host DNS, autentificarea cererilor proxy prin headere și criptarea TLS pentru securizarea conexiunilor client-server. Sistemul suportă, de asemenea, rutarea fluxurilor de intrare și ieșire standard din comenzi piped prin tuneluri securizate.
Aplicația poate fi integrată ca serviciu de sistem în fundal pentru a asigura persistența și recuperarea automată.
Features
- Non-Root Virtual Interfaces - Creates a virtual network interface using private keys without requiring root privileges or kernel-level access.
- User-Space Tunneling - Establishes secure WireGuard tunnels using private keys without requiring root privileges.
- Non-Root VPN Access - Establishes secure encrypted connections to remote networks without requiring administrative permissions to modify system interfaces.
- SNI Proxies - Implements a proxy that routes encrypted traffic by inspecting the Server Name Indication in TLS handshakes.
- SOCKS5 Proxy Tunneling Clients - Implements a SOCKS5 proxy that tunnels network traffic through a secure WireGuard connection.
- WireGuard Proxy Gateways - Translates incoming SOCKS5 proxy requests into encrypted packets for transmission over a WireGuard tunnel.
- WireGuard-to-SOCKS5 Proxies - Tunnels network traffic through WireGuard and exposes the connection as a SOCKS5 or HTTP proxy.
- SNI Routing - Routes TCP streams based on the Server Name Indication field during the TLS handshake over a tunnel.
- Secure Tunnels - Establishes encrypted network bridges to connect multiple remote peers and route traffic via IP ranges.
- WireGuard Key and Routing Management - Manages asymmetric key pairs and IP routing rules to route traffic between multiple WireGuard peers.
- WireGuard VPN Support - Implements secure network tunnels using the WireGuard protocol and exposes them as proxies.
- User-Space Implementations - Provides a network implementation of the WireGuard protocol that runs without root privileges.
- DNS Override Resolvers - Provides DNS resolution that can override system settings to route queries through a secure tunnel.
- UDP Tunneling - Forwards UDP packets from local addresses to remote targets through a secure tunnel.
- IP Range Routing - Directs network traffic to specific peers based on predefined IP address and subnet CIDR rules.
- Local Port Mapping - Maps local listener ports to remote targets by forwarding raw traffic through a secure tunnel.
- Multi-Peer Routing - Allows simultaneous connections to multiple endpoints with traffic routed via defined IP ranges.
- Layer 4 TCP Routing - Directs TCP traffic to specific targets using static routing rules.
- TCP and UDP Forwarders - Forwards raw TCP and UDP packets from local ports to remote destinations through a secure connection.
- Traffic Tunneling - Maps local TCP ports to remote destinations via a secure tunnel.
- HTTP Proxy Forwarders - Provides an HTTP proxy that forwards connections through a secure WireGuard tunnel.
