git404hub

what is wireproxy fr?

windtf/wireproxy — explained in plain English

Analysis updated 2026-06-26

5,593GoAudience · ops devopsComplexity · 3/5LicenseSetup · easy

tl;dr

Wireproxy lets you route one app through a WireGuard VPN without root permissions or changing your system network, it exposes a local SOCKS5/HTTP proxy that tunnels traffic through WireGuard.

vibe map

mindmap
  root((wireproxy))
    What it does
      WireGuard without root
      Local SOCKS5 proxy
      TCP tunnels
    Tech Stack
      Go
      WireGuard protocol
    Use Cases
      Per-app VPN routing
      SSH proxy command
      Reverse TCP tunnel
    Audience
      DevOps engineers
      Power users
    License
      ISC permissive

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

what do people make with this?

VIBE 1

Route a single browser or app through a VPN server in another country while the rest of your machine uses your normal connection.

VIBE 2

Set up a SOCKS5 proxy on localhost that forwards traffic through a WireGuard tunnel, no root required.

VIBE 3

Create a static TCP tunnel so a local service is reachable over WireGuard from a remote machine.

VIBE 4

Use wireproxy as an SSH ProxyCommand so SSH connections go through a WireGuard peer.

what's the stack?

GoWireGuard

how it stacks up fr

windtf/wireproxycgzirim/seek-tunelharries/whatsapp-mcp
Stars5,5935,5855,605
LanguageGoGoGo
Setup difficultyeasymoderatemoderate
Complexity3/53/53/5
Audienceops devopsdevelopervibe coder

Figures from each repo's GitHub metadata at analysis time.

how do i run it?

Difficulty · easy time til it works · 30min

Requires an existing WireGuard peer and its config, wireproxy itself installs with one Go command.

ISC license, use freely for any purpose, including commercial, with minimal restrictions.

in plain english

Wireproxy is a small program that connects to a WireGuard VPN peer and makes that connection available to your other apps as a local proxy, without creating a new network interface on your machine. WireGuard is a modern VPN protocol, but normally setting it up requires administrator (root) permissions and modifies your system's network configuration. Wireproxy avoids both of those requirements by running entirely in user space, meaning it operates like a regular program rather than a system-level network driver. The practical use case is selective routing: you might want one browser or application to send its traffic through a VPN server in another country, while everything else on your machine uses your normal connection. With wireproxy running in the background, you point that specific app at a local SOCKS5 or HTTP proxy address (for example, port 25344 on your own machine), and wireproxy forwards that traffic through the WireGuard tunnel. Beyond proxy mode, wireproxy also supports static TCP tunnels in both directions. A client tunnel listens on a local port and forwards traffic to a remote address over WireGuard. A server tunnel works the opposite way, listening on the WireGuard network and forwarding to a local service. There is also a STDIO tunnel mode, which lets wireproxy act as a proxy command inside SSH configuration. Configuration is done through an INI-style config file that mirrors the format WireGuard already uses, so existing WireGuard configs can be imported with one extra line. The README includes a full sample config with comments explaining each section. Wireproxy is written in Go and can be installed with a single Go install command. It runs on Linux, macOS, and other platforms. The project is licensed under the ISC license.

prompts (copy fr)

prompt 1
I have a WireGuard config file and want to route only my browser through the VPN using wireproxy. Show me the wireproxy config and how to point Firefox at the local SOCKS5 proxy.
prompt 2
How do I set up wireproxy to create a reverse TCP tunnel, exposing a local web server on port 8080 to a remote WireGuard peer?
prompt 3
Give me a wireproxy config that imports my existing wg0.conf WireGuard config and listens on localhost:25344 as an HTTP proxy.
prompt 4
How do I use wireproxy as a ProxyCommand in ~/.ssh/config so SSH to my home server goes through a WireGuard tunnel?

Frequently asked questions

what is wireproxy fr?

Wireproxy lets you route one app through a WireGuard VPN without root permissions or changing your system network, it exposes a local SOCKS5/HTTP proxy that tunnels traffic through WireGuard.

What language is wireproxy written in?

Mainly Go. The stack also includes Go, WireGuard.

What license does wireproxy use?

ISC license, use freely for any purpose, including commercial, with minimal restrictions.

How hard is wireproxy to set up?

Setup difficulty is rated easy, with roughly 30min to a first successful run.

Who is wireproxy for?

Mainly ops devops.

peek the repo → explain another one

This repo across BitVibe Labs

double-check against the repo, no cap.