InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now. Learn more →
Top 23 Go Proxy Projects
-
frp
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
In the previous article, I wrote about a temporary SSH tunneling technique to bypass CGNAT. This method is not suitable for exposing permanent services, at least not without autossh manager. Proper tools for this are rapiz1/rathole or fatedier/frp. I chose Rathole since it's written in Rust and offers better performance and benchmarks.
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
-
-
Xray-core
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
wget https://github.com/XTLS/Xray-core/releases/download/v25.3.6/Xray-linux-64.zip unzip Xray-linux-64.zip chmod +x xray mv xray /usr/bin/xray
-
bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
-
websocketd
Turn any program that uses STDIN/STDOUT into a WebSocket server. Like inetd, but for WebSockets.
I'm pleased with this tool. I couldn't find any other simple cli tool that just reads and writes to WebSockets. Maybe just websocketd: https://github.com/joewalnes/websocketd
I've used websocat for debugging web projects and remote-controlling OBS.
I also have a livereload script that looks something like:
mkfifo $pipe
-
I set up Authentik[^1] on my NAS in a docker container and went from there! Just had to add a .well-known webfinger file to my domain that pointed to the Authentik instance and it "just worked" with Tailscale.
[^1]: https://goauthentik.io/
-
Stream
Stream - Scalable APIs for Chat, Feeds, Moderation, & Video. Stream helps developers build engaging apps that scale to millions with performant and flexible Chat, Feeds, Moderation, and Video APIs and SDKs powered by a global edge network and enterprise-grade infrastructure.
-
Project mention: Hysteria is a powerful, fast and censorship resistant proxy | news.ycombinator.com | 2025-02-12
-
-
dnscrypt-proxy
-
toxiproxy
:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing
-
trojan-go
Go实现的Trojan代理,支持多路复用/路由功能/CDN中转/Shadowsocks混淆插件,多平台,无依赖。A Trojan proxy written in Go. An unidentifiable mechanism that helps you bypass GFW. https://p4gefau1t.github.io/trojan-go/
-
-
-
Project mention: KubeVPN: Revolutionizing Kubernetes Local Development | news.ycombinator.com | 2025-02-19
-
-
Project mention: Psylo browser obscures digital fingerprints by giving each tab its own IP | news.ycombinator.com | 2025-06-25
Per-container proxy settings are already supported.
I use them for a "home" container that gets routed via my home router's Wireguard VPN independently from all other traffic on my computer (as I don't want to take the performance hit of tunneling everything) using the excellent wireproxy [1].
[1] https://github.com/whyvl/wireproxy
-
-
Project mention: Pico.sh (The ultimate SSH powered services for developers) | news.ycombinator.com | 2025-04-02
We’re actually using Unix sockets as the underlying transport layer for this. We’re also not using sshd, we custom wrote our own daemon that’s entire job is tunneling. If you’re curious about this, you can find the project here: https://github.com/antoniomika/sish
sish was actually my first foray into SSH apps. It was a lot of fun to write and pretty much implements tunnels with a routing system on top. It manages connectivity, routing, and reverse proxying all within user space. No namespaces required!
tuns can actually even tunnel UDP traffic over SSH, also entirely in user space. Docs for that can be found here: https://pico.sh/tuns#udp-tunneling
-
Project mention: Httptap: View HTTP/HTTPS requests made by any Linux program | news.ycombinator.com | 2025-02-03
Interesting. Care to share any info about your setup? Would it be a matter of httptap reading a certain environment variable and then forwarding traffic to a SOCKS proxy?
FWIW there is also the excellent tun2socks (https://github.com/xjasonlyu/tun2socks), which was a significant inspiration for this project, and is specifically designed to forward traffic from a TUN device to a SOCKS proxy.
-
mtail
extract internal monitoring data from application logs for collection in a timeseries database
-
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
Go Proxy discussion
Go Proxy related posts
-
WireGuard DoV (DNS-over-VPN)
-
Psylo browser obscures digital fingerprints by giving each tab its own IP
-
The flip phone web: browsing with the original Opera Mini
-
SPQR 2.6.0 with Multicolumn Sharding
-
Leeks and Leaks – Daniel.haxx.se
-
Dumbproxy got Redis auth back end
-
Connet.dev – high performance reverse proxy to connect devices privately
-
A note from our sponsor - InfluxDB
www.influxdata.com | 7 Jul 2025
Index
What are some of the best open-source Proxy projects in Go? This list will help you:
# | Project | Stars |
---|---|---|
1 | frp | 95,735 |
2 | v2ray-core | 46,148 |
3 | v2ray-core | 31,392 |
4 | Xray-core | 29,685 |
5 | bettercap | 17,773 |
6 | websocketd | 17,273 |
7 | authentik | 16,791 |
8 | hysteria | 16,749 |
9 | brook | 14,872 |
10 | dnscrypt-proxy | 12,214 |
11 | toxiproxy | 11,339 |
12 | trojan-go | 8,083 |
13 | hetty | 7,027 |
14 | GeoIP2-CN | 6,993 |
15 | telepresence | 6,879 |
16 | goproxy | 5,843 |
17 | wireproxy | 5,038 |
18 | athens | 4,590 |
19 | sish | 4,269 |
20 | tun2socks | 3,963 |
21 | mtail | 3,933 |
22 | kubefwd | 3,919 |
23 | Cloak | 3,607 |