Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

github.com

Post reply on HN
Print view View original

41–50 of 67 posts

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#41

Post by fransje26 »

ggpsv wrote: post #38
fransje26 wrote: post #30

Earlier quoted context omitted.

Would you happen to have any good resources explaining how such a setup could be configured?

I've done this in the past to assign a different exit node in Mullvad to a given Firefox container. 1. You click the Multi-Account Containers extension icon 2. Select "Manage Containers" 3. Select the container that you want to use for this purpose 4. Click "Advanced proxy settings" 5. Enter the address. For example, `socks://us-nyc-wg-socks5-301.relays.mullvad.net:1080` if I'm using one of Mullvad's NYC servers This…

Thank you for the explanation!

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#42

Post by fransje26 »

k4rli wrote: post #37
fransje26 wrote: post #30

Earlier quoted context omitted.

Would you happen to have any good resources explaining how such a setup could be configured?

I've been using Sidebery and this for container specific proxy configuration and it works fine https://addons.mozilla.org/it/firefox/addon/container-proxy/ I had a socks server running in docker that turned Forticlient, the worst corporate vpn solution ever, into socks so then I could use access the internal urls in one container, still have fast internet elsewhere, and not expose my computer's entire network traffic…

Thanks!

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#44

Post by CyberShadow »

nicoco wrote: post #33

https://github.com/dariost/soks works better for what I needed to do with wireguard. It does more or less the same thing but it reuses an existing wireguard interface. I detailed my use in this blog post https://www.nicoco.fr/blog/2023/09/10/wireguard/ (yes, shameless plug).

This is very different. wireproxy seems to contain a userspace implementation of TCP and Wireguard. soks looks like an IP router than can only handle TCP, replacing routing tables as the control mechanism with something that decides to use or not use a SOCKS5 proxy.

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#45

Post by dpeckett »

ignoramous wrote: post #36
eclark wrote: post #16

Earlier quoted context omitted.

https://github.com/noisysockets/noisysockets With that, you can replace a Dialer in Go that connects sockets, effectively wrapping sockets with Wireguard. Since it does that in userspace, you get no tun/tap. This is all open-sourced by @dpeckett With those things, he also built a userspace wireguard gateway that includes DNS resolution. https://github.com/noisysockets/gateway https://news.ycombinator.com/user?id=dpec…

Upstream WireGuard (golang) has had this capability for a few years now: https://github.com/WireGuard/wireguard-go/tree/master/tun/ne...

Yep noisysockets is based originally off wireguard-go but is an attempt to simplify and make things a lot more idiomatic for library use. Filling in the gaps etc and improving the ergonomics. Hoping to build a bit of an ecosystem of supporting projects around it, eg. I'm currently working on a STUN server implementation based on the approach described in https://nordsecurity.com/blog/reaching-beyond-1gbps

One of the recent feature divergences from upstream is support for network exit nodes / gateways.

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#46

Post by lxgr »

Retr0id wrote: post #39
lxgr wrote: post #5

Great little tool! I use it to selectively proxy Firefox tabs using multi-account containers to a home router that speaks Wireguard (but no application-layer proxying protocol or SSH).

TIL multi-account containers allow per-container proxy settings! Am I correct in thinking it needs a separate extension to set that up, like this one? https://addons.mozilla.org/en-GB/firefox/addon/container-pro... Edit: I was not correct, which is apparently grounds for downvotes now.

No separate extension needed; it’s right there in the container settings now!

Somebody has the detailed steps in a sibling comment.

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#47

Post by zackify »

nunez wrote: post #18
poorman wrote: post #17

Nice! I was just thinking it would be sweet to have something like this to proxy all my Thunderbird email connections through my Tailscale exit node, without having to direct all my traffic through the exit node.

You can use the tailscale cli as a socks proxy. https://tailscale.com/kb/1113/aws-lambda If you slap that into a container image and expose the socks port tailscale listens on, bada bing, bada proxy!

Tailscale has app connectors now. You can send all your traffic through certain exit nodes without doing any of this too!

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#48

Post by willmadden »

imiric wrote: post #35

Neat! If you want something like this specifically for Mullvad VPN, I've had a good experience with https://github.com/imiric/mullvad-proxy (not my project, just forked it for some updates). What I like is that it embeds the Mullvad CLI tool, so switching servers is trivial, and it's all isolated from the host machine. It's also "just" nginx and some scripts, so it should have good SOCKS5 support.

You can download the "all" config from Mullvad and upload that into stock wireguard. Every Mullvad location becomes available via a huge dropdown in wireguard.

https://mullvad.net/en/blog/wireguard-configuration-tool-has...

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#49

Post by lxgr »

nicoco wrote: post #33

https://github.com/dariost/soks works better for what I needed to do with wireguard. It does more or less the same thing but it reuses an existing wireguard interface. I detailed my use in this blog post https://www.nicoco.fr/blog/2023/09/10/wireguard/ (yes, shameless plug).

Out of curiosity, why does this work better for you?

I used to do a similar thing using a Docker container on a Raspberry Pi, but being able to run this on any OS and with a guarantee that it won’t accidentally mess up the host’s routing table makes the user space solution a much better choice in my view.

Re: Wireproxy: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy

#50

Post by batch12 »

Retr0id wrote: post #39
lxgr wrote: post #5

Great little tool! I use it to selectively proxy Firefox tabs using multi-account containers to a home router that speaks Wireguard (but no application-layer proxying protocol or SSH).

TIL multi-account containers allow per-container proxy settings! Am I correct in thinking it needs a separate extension to set that up, like this one? https://addons.mozilla.org/en-GB/firefox/addon/container-pro... Edit: I was not correct, which is apparently grounds for downvotes now.

You can be downvoted for anything. Walk it off :)
Post reply on HN