WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
  • wireproxy

    Wireguard client that exposes itself as a socks5 proxy

  • openvpn-tuna

    OpenVPN with ocproxy/tunsocks/VPN-to-proxy/socks2tun support, as well as AWS VPC. Ported from https://github.com/ValdikSS/openvpn-tunpipe and https://github.com/samm-git/aws-vpn-client

  • https://github.com/bendlas/openvpn-tuna

    Otherwise you may be able to use SSH's SOCKS proxy mode if you can directly SSH, e.g. ssh -D 3128 user@host .. will listen on port 3128 as a SOCKS proxy.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
  • boringtun

    Userspace WireGuard® Implementation in Rust

  • Maybe https://github.com/cloudflare/boringtun or https://github.com/WireGuard/wireguard-go ?

  • wireguard-go

    Mirror only. Official repository is at https://git.zx2c4.com/wireguard-go

  • Maybe https://github.com/cloudflare/boringtun or https://github.com/WireGuard/wireguard-go ?

  • noisysockets

    Userspace TCP/IP Sockets For WireGuard.

  • https://github.com/noisysockets/noisysockets

    With that, you can replace a Dialer in Go that connects sockets, effectively wrapping sockets with Wireguard. Since it does that in userspace, you get no tun/tap. This is all open-sourced by @dpeckett

    With those things, he also built a userspace wireguard gateway that includes DNS resolution. https://github.com/noisysockets/gateway

    https://news.ycombinator.com/user?id=dpeckett

  • gateway

    A WireGuard-Go Docker Image With An Embedded DNS Forwarder. (by noisysockets)

  • https://github.com/noisysockets/noisysockets

    With that, you can replace a Dialer in Go that connects sockets, effectively wrapping sockets with Wireguard. Since it does that in userspace, you get no tun/tap. This is all open-sourced by @dpeckett

    With those things, he also built a userspace wireguard gateway that includes DNS resolution. https://github.com/noisysockets/gateway

    https://news.ycombinator.com/user?id=dpeckett

  • sing-box

    The universal proxy platform

  • Several multi-protocol proxy clients support this functionality, some notable open-source examples include:

      - [sing-box](https://github.com/SagerNet/sing-box)

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • Clash.Meta

    A rule-based tunnel in Go. (by muink)

  • - [clash-meta](https://github.com/muink/Clash.Meta) and other clash-based clients

  • Xray-core

    Xray, Penetrates Everything. Also the best v2ray-core, with XTLS support. Fully compatible configuration.

  • - [xray](https://github.com/xtls/xray-core)

  • onetun

    User space WireGuard port-forward in Rust

  • soks

    A minimalistic SOCKS5 proxy over a network interface (like a VPN or a second physical network device)

  • https://github.com/dariost/soks works better for what I needed to do with wireguard. It does more or less the same thing but it reuses an existing wireguard interface. I detailed my use in this blog post https://www.nicoco.fr/blog/2023/09/10/wireguard/ (yes, shameless plug).

  • mullvad-proxy

    Mullvad VPN docker container providing a HTTP and SOCKS5 Proxy (by imiric)

  • Neat!

    If you want something like this specifically for Mullvad VPN, I've had a good experience with https://github.com/imiric/mullvad-proxy (not my project, just forked it for some updates). What I like is that it embeds the Mullvad CLI tool, so switching servers is trivial, and it's all isolated from the host machine.

  • pproxy

    HTTP/Socks4/Socks5/Shadowsocks/ShadowsocksR/Redirect asynchronous tunnel proxy implemented in Python 3 asyncio.

  • Neat! This is a great replacement for my SSH tunnels when I need a different IP.

    Somewhat related tool: pproxy, can, among many other things, "convert" different tunnel protocols into each other. Also features routing capabilities. I used it to turn an SSH SOCKS5 into an HTTP proxy. https://github.com/moreati/pproxy

  • python-proxy

    HTTP/HTTP2/HTTP3/Socks4/Socks5/Shadowsocks/ShadowsocksR/SSH/Redirect/Pf TCP/UDP asynchronous tunnel proxy implemented in Python 3 asyncio.

  • FWIW, that fork is 6 years out of date, forked from https://github.com/qwj/python-proxy.

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts