How does G3 compare to Envoy for proxy needs?

G3 offers similar high-performance and modularity but excels in protocol diversity like Thrift RPC and DNS over multiple protocols, while Envoy has a larger ecosystem and more mature reverse proxy features. G3's TLS interception and ICAP integration are unique strengths for security-focused deployments.

How to set up TLS interception with g3proxy?

Configure g3proxy with TLS MITM interception enabled, using tools like g3mkcert to generate certificates. Refer to the g3proxy user guide for detailed steps on traffic dump and ICAP adaptation for security integration.

What platforms does G3 fully support?

Linux is fully supported, while it compiles on macOS, Windows, and BSD variants, but some advanced features like kernel-level optimizations may be limited on non-Linux systems, as noted in the target platform section.

Can G3 be used as a reverse proxy?

Yes, but basic support is available in g3proxy, and g3tiles is a work in progress, so it may lack advanced reverse proxy features compared to dedicated solutions like Nginx or HAProxy.

How to benchmark HTTP/3 performance with g3bench?

Use g3bench with HTTP/3 flags to simulate traffic, as it supports HTTP/3 along with other protocols. This tool is designed for comprehensive network testing, including TLS handshake and WebSocket benchmarks.

Is G3 suitable for a small startup with limited DevOps resources?

Likely not, due to its enterprise-oriented complexity, need for Rust expertise, and incomplete components. Startups might prefer simpler, more established proxies like Squid or Caddy for quicker deployment.

g3proxy — Rust Enterprise Proxy Suite

What is g3proxy?

G3 is an enterprise-oriented toolkit for building high-performance, reliable network proxy infrastructure. It provides a collection of modular proxy solutions, including forward proxies, reverse proxies (WIP), load balancers (TBD), and NAT traversal (WIP), designed to handle diverse protocols with extensive security and observability features.

Target Audience

Enterprise infrastructure engineers and SRE teams building or managing scalable, secure network proxy layers. It's also suitable for developers needing to benchmark or test various network protocols (HTTP, DNS, WebSocket, Thrift RPC) under realistic conditions.

Value Proposition

Developers choose G3 for its combination of high performance from its async Rust foundation, enterprise-grade security features like TLS MITM interception and ICAP adaptation, and exceptional protocol diversity including HTTP/1.1 to HTTP/3, DNS over multiple protocols, and Thrift RPC. Its modular design allows teams to deploy specific components like g3proxy or g3statsd independently.

Enterprise-oriented Generic Proxy Solutions. Maintenance mode now, please switch to use VEY for new development efforts

Use Cases

Best For

Deploying a forward proxy with advanced features like proxy chaining, dynamic upstream selection, and rich ACL rules.
Implementing TLS interception (MITM) for traffic inspection and integrating with third-party security products via ICAP.
Benchmarking network services across a wide range of protocols including HTTP/1.1, HTTP/2, HTTP/3, WebSocket, and various DNS protocols.
Building a StatsD-compatible metrics aggregation layer for observability in proxy environments.
Managing TLS/TLCP certificates and keys, including generating root CAs and client/server certificates.
Creating a cross-platform proxy solution that runs on Linux, macOS, Windows, and major BSD variants.

Not Ideal For

Teams needing a production-ready reverse proxy or load balancer immediately, as g3tiles and load balancer support are marked as work in progress or to be done.
Small projects or individual developers seeking a simple, out-of-the-box proxy solution, due to G3's enterprise-level configuration complexity and reliance on Rust expertise.
Organizations prioritizing a large, active open-source community for support and integrations, as G3 is a corporate-backed project with a niche focus.

Pros & Cons

Pros

Async Rust Performance

Built on async Rust for high speed and reliability, as emphasized in g3proxy's feature highlights for fast and reliable operation.

Extensive Protocol Support

Supports a wide range of protocols including HTTP/1.1 to HTTP/3, WebSocket, and DNS over multiple protocols, making it versatile for diverse network environments, as detailed in g3bench and g3proxy.

Enterprise Security Features

Offers TLS MITM interception and ICAP adaptation for integrating with third-party security products, providing robust security for traffic inspection and compliance.

Rich Observability

Provides multi-level monitoring metrics and integrates with various observability tools, enabling detailed performance tracking at ingress, egress, and user levels.

Cons

Incomplete Core Components

Reverse proxy (g3tiles) and load balancer are explicitly marked as work in progress or to be done, limiting its out-of-the-box utility for full proxy infrastructure.

Configuration Complexity

With rich ACL rules, user-level configurations, and multiple modular tools, setup and management can be daunting, requiring significant time and expertise.

Corporate-Backed Limitations

As a Bytedance project, long-term support and community-driven development may be less predictable compared to broader open-source ecosystems, potentially affecting future updates.

What is g3proxy?

Target Audience

Value Proposition

Use Cases

Best For

Deploying a forward proxy with advanced features like proxy chaining, dynamic upstream selection, and rich ACL rules.
Implementing TLS interception (MITM) for traffic inspection and integrating with third-party security products via ICAP.
Benchmarking network services across a wide range of protocols including HTTP/1.1, HTTP/2, HTTP/3, WebSocket, and various DNS protocols.
Building a StatsD-compatible metrics aggregation layer for observability in proxy environments.
Managing TLS/TLCP certificates and keys, including generating root CAs and client/server certificates.
Creating a cross-platform proxy solution that runs on Linux, macOS, Windows, and major BSD variants.

Not Ideal For

Teams needing a production-ready reverse proxy or load balancer immediately, as g3tiles and load balancer support are marked as work in progress or to be done.
Small projects or individual developers seeking a simple, out-of-the-box proxy solution, due to G3's enterprise-level configuration complexity and reliance on Rust expertise.
Organizations prioritizing a large, active open-source community for support and integrations, as G3 is a corporate-backed project with a niche focus.

Pros & Cons

Pros

Async Rust Performance

Built on async Rust for high speed and reliability, as emphasized in g3proxy's feature highlights for fast and reliable operation.

Extensive Protocol Support

Supports a wide range of protocols including HTTP/1.1 to HTTP/3, WebSocket, and DNS over multiple protocols, making it versatile for diverse network environments, as detailed in g3bench and g3proxy.

Enterprise Security Features

Offers TLS MITM interception and ICAP adaptation for integrating with third-party security products, providing robust security for traffic inspection and compliance.

Rich Observability

Provides multi-level monitoring metrics and integrates with various observability tools, enabling detailed performance tracking at ingress, egress, and user levels.

Cons

Incomplete Core Components

Reverse proxy (g3tiles) and load balancer are explicitly marked as work in progress or to be done, limiting its out-of-the-box utility for full proxy infrastructure.

Configuration Complexity

With rich ACL rules, user-level configurations, and multiple modular tools, setup and management can be daunting, requiring significant time and expertise.

Corporate-Backed Limitations

As a Bytedance project, long-term support and community-driven development may be less predictable compared to broader open-source ecosystems, potentially affecting future updates.

g3proxy

What is g3proxy?

Overview

Use Cases

Best For

Not Ideal For

Pros & Cons

Pros

Cons

Frequently Asked Questions

Related Projects

Found a gem we're missing?

g3proxy

What is g3proxy?

Overview

Use Cases

Best For

Not Ideal For

Pros & Cons

Pros

Cons

Frequently Asked Questions

Related Projects

Found a gem we're missing?