Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

github.com

Post reply on HN
Print view View original

31–40 of 67 posts

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#31

Post by dizhn »

chazeon wrote: post #21

Several multi-protocol proxy clients support this functionality, some notable open-source examples include: - [sing-box](https://github.com/SagerNet/sing-box) - [clash-meta](https://github.com/muink/Clash.Meta) and other clash-based clients - [xray](https://github.com/xtls/xray-core) Close-sourced client include [Surge Mac/iOS]( https://nssurge.com/ ).

In the closed-source world, cloudflare's warp can also work in proxy mode. Even the free accounts can work this way after converting the warp config to plain wireguard.

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#33

Post by nicoco »

https://github.com/dariost/soks works better for what I needed to do with wireguard. It does more or less the same thing but it reuses an existing wireguard interface. I detailed my use in this blog post https://www.nicoco.fr/blog/2023/09/10/wireguard/ (yes, shameless plug).

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#34

Post by rjzzleep »

chazeon wrote: post #21

Several multi-protocol proxy clients support this functionality, some notable open-source examples include: - [sing-box](https://github.com/SagerNet/sing-box) - [clash-meta](https://github.com/muink/Clash.Meta) and other clash-based clients - [xray](https://github.com/xtls/xray-core) Close-sourced client include [Surge Mac/iOS]( https://nssurge.com/ ).

For people that care, clash + v2ray seems to be the only thing that reliably works in China. While most big VPN providers claim that they work, they don’t. I haven’t spent a lot of time figuring out how it works, but I do like the concept of rule groups to decide which domains the vpn should proxy.

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#35

Post by imiric »

Neat!

If you want something like this specifically for Mullvad VPN, I've had a good experience with https://github.com/imiric/mullvad-proxy (not my project, just forked it for some updates). What I like is that it embeds the Mullvad CLI tool, so switching servers is trivial, and it's all isolated from the host machine. It's also "just" nginx and some scripts, so it should have good SOCKS5 support.

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#36

Post by ignoramous »

eclark wrote: post #16
vbezhenar wrote: post #6

Is there completely userspace server implementation? Without tun/tap devices, etc. I guess some kind of userspace IP stack is necessary for that, although not sure.

https://github.com/noisysockets/noisysockets With that, you can replace a Dialer in Go that connects sockets, effectively wrapping sockets with Wireguard. Since it does that in userspace, you get no tun/tap. This is all open-sourced by @dpeckett With those things, he also built a userspace wireguard gateway that includes DNS resolution. https://github.com/noisysockets/gateway https://news.ycombinator.com/user?id=dpec…

Upstream WireGuard (golang) has had this capability for a few years now: https://github.com/WireGuard/wireguard-go/tree/master/tun/ne...

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#37

Post by k4rli »

fransje26 wrote: post #30
lxgr wrote: post #5

Great little tool! I use it to selectively proxy Firefox tabs using multi-account containers to a home router that speaks Wireguard (but no application-layer proxying protocol or SSH).

Would you happen to have any good resources explaining how such a setup could be configured?

I've been using Sidebery and this for container specific proxy configuration and it works fine https://addons.mozilla.org/it/firefox/addon/container-proxy/

I had a socks server running in docker that turned Forticlient, the worst corporate vpn solution ever, into socks so then I could use access the internal urls in one container, still have fast internet elsewhere, and not expose my computer's entire network traffic to Forticrap.

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#38

Post by ggpsv »

fransje26 wrote: post #30
lxgr wrote: post #5

Great little tool! I use it to selectively proxy Firefox tabs using multi-account containers to a home router that speaks Wireguard (but no application-layer proxying protocol or SSH).

Would you happen to have any good resources explaining how such a setup could be configured?

I've done this in the past to assign a different exit node in Mullvad to a given Firefox container.

1. You click the Multi-Account Containers extension icon

2. Select "Manage Containers"

3. Select the container that you want to use for this purpose

4. Click "Advanced proxy settings"

5. Enter the address. For example, `socks://us-nyc-wg-socks5-301.relays.mullvad.net:1080` if I'm using one of Mullvad's NYC servers

This supposes you're already connected to one of Mullvad's wireguard servers.

You can also use the FoxyProxy extension [0] for finer-control or extend this behavior across all tabs.

[0]: https://addons.mozilla.org/en-US/firefox/addon/foxyproxy-sta...

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#39

Post by Retr0id »

lxgr wrote: post #5

Great little tool! I use it to selectively proxy Firefox tabs using multi-account containers to a home router that speaks Wireguard (but no application-layer proxying protocol or SSH).

TIL multi-account containers allow per-container proxy settings!

Am I correct in thinking it needs a separate extension to set that up, like this one? https://addons.mozilla.org/en-GB/firefox/addon/container-pro...

Edit: I was not correct, which is apparently grounds for downvotes now.

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#40

Post by shiandow »

Retr0id wrote: post #39
lxgr wrote: post #5

Great little tool! I use it to selectively proxy Firefox tabs using multi-account containers to a home router that speaks Wireguard (but no application-layer proxying protocol or SSH).

TIL multi-account containers allow per-container proxy settings! Am I correct in thinking it needs a separate extension to set that up, like this one? https://addons.mozilla.org/en-GB/firefox/addon/container-pro... Edit: I was not correct, which is apparently grounds for downvotes now.

It used to, but now I think they added it to the 'main' one.
Post reply on HN