How do I set up a basic VMess server with Shoes?

Create a YAML config file with address, protocol type as vmess, cipher, and user_id based on the example in the README, then run 'shoes config.yaml' to start the server. Ensure udp_enabled is set if needed.

Shoes vs sing-box: which should I choose for a multi-protocol proxy?

Shoes is Rust-based and emphasizes performance with TUN support, while sing-box is Go-based and often has more community integrations. Choose Shoes for Rust enthusiasts needing TUN; opt for sing-box for broader ecosystem support.

Can Shoes run in Docker containers?

While not explicitly documented, Shoes is a binary that can be containerized by building a custom Docker image with the binary and config files. Pre-built Docker images are not provided in the README.

How to configure rule-based routing in Shoes?

Define rules in the YAML config using masks for IP/CIDR or hostnames, specify actions like allow, and chain upstream proxies. Refer to the examples directory for configurations like the TUN VPN setup.

What are the performance benchmarks for Shoes compared to Hysteria?

Specific benchmarks aren't provided in the README, but being Rust-based, Shoes likely offers high throughput. For accurate comparisons, check community testing or run your own benchmarks with tools like iperf.

Does Shoes support transparent proxying without TUN mode?

Yes, through standard proxy protocols like SOCKS5 with UDP ASSOCIATE, but for full network-level transparency, TUN mode is required. Without TUN, it operates at the application layer.

How to generate TLS certificates for Shoes servers?

Use external tools like Let's Encrypt or openssl to generate cert.pem and key.pem files, then reference them in the TLS settings of your YAML configuration, as shown in the VLESS with Vision example.

shoes — Multi-Protocol Proxy Server

What is shoes?

Shoes is a high-performance proxy server written in Rust that supports a wide range of proxy protocols including HTTP, SOCKS5, VMess, VLESS, Shadowsocks, Trojan, and many others. It solves the problem of needing multiple proxy tools by providing a unified server capable of handling diverse networking and security requirements, from simple web proxying to advanced VPN-like TUN device operations.

Target Audience

Network administrators, developers, and privacy-conscious users who need a flexible, self-hosted proxy solution for routing, securing, or obfuscating network traffic across various protocols.

Value Proposition

Developers choose Shoes for its exceptional performance due to being written in Rust, its extensive protocol support eliminating the need for multiple tools, and features like hot reloading, rule-based routing, and TUN device support that provide enterprise-grade flexibility in a single binary.

A multi-protocol proxy server written in Rust (HTTP, SOCKS5, Vmess, Vless, Shadowsocks, Trojan, Snell, Hysteria2, TUIC v5, AnyTLS, Naiveproxy, XTLS)

Use Cases

Best For

Setting up a self-hosted multi-protocol proxy server for enhanced privacy
Routing network traffic with rule-based policies and upstream chaining
Creating a VPN-like environment using TUN devices for transparent proxying
Deploying high-performance proxy servers with support for modern protocols like Hysteria2 and TUIC v5
Implementing TLS fingerprinting and SNI-based routing for advanced security
Managing proxy configurations with hot reloading for zero-downtime updates

Not Ideal For

Teams needing a graphical user interface for proxy management without YAML configuration
Projects where only basic HTTP/SOCKS5 proxying is sufficient, as Shoes' extensive features add unnecessary complexity
Environments requiring Windows or macOS native TUN device support, since Shoes' TUN mode is limited to Linux, Android, and iOS
Organizations that prioritize a large, active community with abundant plugins and integrations over raw performance

Pros & Cons

Pros

Broad Protocol Coverage

Supports over 15 proxy protocols including VMess, VLESS, Shadowsocks, and modern ones like Hysteria2 and TUIC v5, eliminating the need for multiple tools according to the README.

Rust-Powered Performance

Built in Rust, it leverages memory safety and concurrency for efficient, reliable proxy serving with minimal overhead, as highlighted in the project philosophy.

Hot Reloading Convenience

Allows configuration updates without restarting the server via the --no-reload flag, enabling zero-downtime changes for production environments.

Advanced Routing Capabilities

Features rule-based routing by IP/CIDR or hostname masks with upstream proxy chaining, providing flexible traffic management as shown in the examples.

TUN Device Integration

Provides Layer 3 VPN functionality via TUN devices on Linux, Android, and iOS, enabling transparent proxying for entire networks, as detailed in the TUN/VPN mode section.

Cons

Steep Configuration Curve

Requires detailed YAML files and command-line expertise, with complex examples for protocols like Reality, which can be daunting for users new to proxy servers.

Separate Access Control

Advanced access control features like IP allowlists are delegated to a separate project (tobaru), adding complexity for integrated security management.

Limited Cross-Platform TUN Support

TUN mode is not available on Windows or macOS, restricting its use for VPN-like operations on all major desktop operating systems.

Ecosystem Immaturity

Compared to established alternatives like v2ray or sing-box listed in similar projects, Shoes has a smaller community, which may affect support and third-party tool availability.

Frequently Asked Questions

What is shoes?

Target Audience

Network administrators, developers, and privacy-conscious users who need a flexible, self-hosted proxy solution for routing, securing, or obfuscating network traffic across various protocols.

Value Proposition

Use Cases

Best For

Setting up a self-hosted multi-protocol proxy server for enhanced privacy
Routing network traffic with rule-based policies and upstream chaining
Creating a VPN-like environment using TUN devices for transparent proxying
Deploying high-performance proxy servers with support for modern protocols like Hysteria2 and TUIC v5
Implementing TLS fingerprinting and SNI-based routing for advanced security
Managing proxy configurations with hot reloading for zero-downtime updates

Not Ideal For

Teams needing a graphical user interface for proxy management without YAML configuration
Projects where only basic HTTP/SOCKS5 proxying is sufficient, as Shoes' extensive features add unnecessary complexity
Environments requiring Windows or macOS native TUN device support, since Shoes' TUN mode is limited to Linux, Android, and iOS
Organizations that prioritize a large, active community with abundant plugins and integrations over raw performance

Pros & Cons

Pros

Broad Protocol Coverage

Supports over 15 proxy protocols including VMess, VLESS, Shadowsocks, and modern ones like Hysteria2 and TUIC v5, eliminating the need for multiple tools according to the README.

Rust-Powered Performance

Built in Rust, it leverages memory safety and concurrency for efficient, reliable proxy serving with minimal overhead, as highlighted in the project philosophy.

Hot Reloading Convenience

Allows configuration updates without restarting the server via the --no-reload flag, enabling zero-downtime changes for production environments.

Advanced Routing Capabilities

Features rule-based routing by IP/CIDR or hostname masks with upstream proxy chaining, providing flexible traffic management as shown in the examples.

TUN Device Integration

Provides Layer 3 VPN functionality via TUN devices on Linux, Android, and iOS, enabling transparent proxying for entire networks, as detailed in the TUN/VPN mode section.

Cons

Steep Configuration Curve

Requires detailed YAML files and command-line expertise, with complex examples for protocols like Reality, which can be daunting for users new to proxy servers.

Separate Access Control

Advanced access control features like IP allowlists are delegated to a separate project (tobaru), adding complexity for integrated security management.

Limited Cross-Platform TUN Support

TUN mode is not available on Windows or macOS, restricting its use for VPN-like operations on all major desktop operating systems.

Ecosystem Immaturity

Compared to established alternatives like v2ray or sing-box listed in similar projects, Shoes has a smaller community, which may affect support and third-party tool availability.

Frequently Asked Questions

shoes

What is shoes?

Overview

Use Cases

Best For

Not Ideal For

Pros & Cons

Pros

Cons

Frequently Asked Questions

Related Projects

Found a gem we're missing?

shoes

What is shoes?

Overview

Use Cases

Best For

Not Ideal For

Pros & Cons

Pros

Cons

Frequently Asked Questions

Related Projects

Found a gem we're missing?