Proxy is golang achieve high performance http, https, websocket, tcp, udp, socks5 proxy server that supports forward proxy, reverse proxy, transparent proxy, network penetration, TCP / UDP port mapping, SSH transit, TLS encrypted transmission , protocol conversion, DNS pollution prevention intelligent agent, pre-CDN / Nginx anti generation proxy connection redirection.
update content:
- sps: increased --hosts parameters, the format is: domain @ IP, domain @ IP.
- Updated built-in certificate.
Also notice it, can run on Linux, Windows, macOS, full-featured proxy management panel on the arm upcoming release, preview:
Features:
-
Chain Agent, the program itself can act as a proxy, the proxy if it can be set higher as the two agents, and the N-level proxy.
-
Encrypted communication, if the program is not an agent, but also the higher the agent program, the communication between the higher-level proxy may be encrypted and, using the underlying high strength TLS encryption, no security features.
-
Smart HTTP, SOCKS5 proxy, visit the website will automatically determine whether the shield, the shield if it will use the superior agent (the premise is equipped with superior agent) visit the Web site; site if access is not shielded, in order to speed up access, the agent directly visit the Web site, without the use of a higher level proxy.
-
Domain black list, freer way of controlling access to the site.
-
Cross-platform, whether you are widows, linux, or mac, or even raspberry pie, you can run a good proxy.
-
Multi-protocol support, support for HTTP (S), TCP, UDP, Websocket, SOCKS5 proxy.
-
TCP / UDP port forwarding.
-
Support within the network penetration, protocol support TCP and UDP.
-
Transit SSH, HTTP (S), SOCKS5 proxy support SSH transit, higher Linux server does not require any server, a proxy can be happy local Internet.
-
KCP protocol support, HTTP (S), SOCKS5 proxy support KCP protocol for transferring data, reduce delays, enhance the browsing experience.
-
Integrated external API, HTTP (S), SOCKS5 proxy authentication functionality may be integrated with an external HTTP API, the user can easily control agent by an external system.
-
Reverse proxy, DNS support directly to the proxy listens ip, proxy and proxy access will help you need to access the HTTP (S) Web site.
-
Transparent HTTP (S) proxy, with iptables, the gateway directly to the forward direction of the flow of 80,443 out of the proxy, can be achieved without the perception of intelligent router agent.
-
Protocol conversion, you can put existing HTTP (S) or SOCKS5 or SS agent converted to a port to support both HTTP (S) and SOCKS5 and SS agents, SOCKS5 converted and SS agents if superiors are SOCKS5 proxy, then the support UDP function while supporting powerful cascading authentication.
-
Custom underlying encrypted transmission, http (s) \ sps \ socks on tcp agent can tls and standard encryption protocol encryption tcp data KCP, in addition to support for custom encryption and after tls KCP, that is to say custom encryption and tls | kcp can be used in combination, the internal use of AES256 encryption, when using only need to define a password.
-
Compressing the underlying efficient transmission, http (s) \ sps \ socks on tcp agent can tls and custom encryption standard encryption protocol encryption and kcp tcp data may be compressed data after encryption, and compression that is custom encryption and tls | kcp can be used in combination.
-
Secure DNS proxy, DNS proxy server can be provided through a local proxy for secure encrypted communications agency superiors pollution prevention and DNS queries.
-
Load balancing, high availability, HTTP (S) \ SOCKS5 \ SPS agent support superior high availability and load balancing, multiple superiors repeat -P parameter.
-
Designated export IP, HTTP (S) \ SOCKS5 \ SPS proxy support clients with IP connectivity over the entrance, the entrance to use IP as an export IP access target site. If the entry is within the IP network IP, IP does not use export ingress IP
-
Support speed limit, HTTP (S) \ SOCKS5 \ SPS proxy support speed limit.
-
SOCKS5 proxy support cascading certification.
-
Certificate parameters base64 data, the default -C case, -K parameter is the path crt certificate and key file, if it is base64: // at the beginning, then consider the following data is base64 encoded, decoded after the use.
download link: