windtf/wireproxy
Wireproxy
wireproxy 是一个用户空间的 WireGuard 客户端和网络网关，无需 root 权限或系统级接口更改即可建立安全隧道。它作为一个 VPN 代理，可以将 WireGuard 连接暴露为 SOCKS5 或 HTTP 代理。
该项目提供专门的路由功能，包括根据服务器名称指示（SNI）引导加密流量的 TLS SNI 代理，以及用于将本地 TCP 和 UDP 端口映射到远程目标的网关。它支持多对等点管理，使用定义的 IP 范围在多个端点之间路由流量。
其他功能包括 DNS 主机名解析、通过标头进行的代理请求身份验证，以及用于保护客户端-服务器连接的 TLS 加密。该系统还支持通过管道命令将标准输入和输出流路由通过安全隧道。
该应用可作为后台系统服务集成，以确保持久性和自动恢复。
Features
- Non-Root Virtual Interfaces - Creates a virtual network interface using private keys without requiring root privileges or kernel-level access.
- User-Space Tunneling - Establishes secure WireGuard tunnels using private keys without requiring root privileges.
- Non-Root VPN Access - Establishes secure encrypted connections to remote networks without requiring administrative permissions to modify system interfaces.
- SNI Proxies - Implements a proxy that routes encrypted traffic by inspecting the Server Name Indication in TLS handshakes.
- SOCKS5 Proxy Tunneling Clients - Implements a SOCKS5 proxy that tunnels network traffic through a secure WireGuard connection.
- WireGuard Proxy Gateways - Translates incoming SOCKS5 proxy requests into encrypted packets for transmission over a WireGuard tunnel.
- WireGuard-to-SOCKS5 Proxies - Tunnels network traffic through WireGuard and exposes the connection as a SOCKS5 or HTTP proxy.
- SNI Routing - Routes TCP streams based on the Server Name Indication field during the TLS handshake over a tunnel.
- Secure Tunnels - Establishes encrypted network bridges to connect multiple remote peers and route traffic via IP ranges.
- WireGuard Key and Routing Management - Manages asymmetric key pairs and IP routing rules to route traffic between multiple WireGuard peers.
- WireGuard VPN Support - Implements secure network tunnels using the WireGuard protocol and exposes them as proxies.
- User-Space Implementations - Provides a network implementation of the WireGuard protocol that runs without root privileges.
- DNS Override Resolvers - Provides DNS resolution that can override system settings to route queries through a secure tunnel.
- UDP Tunneling - Forwards UDP packets from local addresses to remote targets through a secure tunnel.
- IP Range Routing - Directs network traffic to specific peers based on predefined IP address and subnet CIDR rules.
- Local Port Mapping - Maps local listener ports to remote targets by forwarding raw traffic through a secure tunnel.
- Multi-Peer Routing - Allows simultaneous connections to multiple endpoints with traffic routed via defined IP ranges.
- Layer 4 TCP Routing - Directs TCP traffic to specific targets using static routing rules.
- TCP and UDP Forwarders - Forwards raw TCP and UDP packets from local ports to remote destinations through a secure connection.
- Traffic Tunneling - Maps local TCP ports to remote destinations via a secure tunnel.
- HTTP Proxy Forwarders - Provides an HTTP proxy that forwards connections through a secure WireGuard tunnel.
