How do I set up vproxy with HTTPS and my own TLS certificates?

Use the command 'vproxy run https --tls-cert cert.pem --tls-key key.pem' with your certificate files. If no certificate is provided, vproxy auto-generates a self-signed one, but this is not suitable for production environments.

vproxy vs Squid: which is better for an HTTP caching proxy?

vproxy is optimized for raw performance and multi-protocol support but lacks built-in caching features. Squid is a better choice if you need extensive caching, access control lists, and a mature ecosystem for web proxying.

How to run vproxy as a background daemon on Linux?

Use 'sudo vproxy start' with parameters like '-i' for IP ranges. The daemon can be managed with 'vproxy stop', 'restart', and 'log' commands, but note that these require sudo privileges for full functionality.

Can vproxy handle WebSocket connections?

Yes, as it supports HTTP and HTTPS proxying, WebSocket traffic can be tunneled through CONNECT methods. However, there's no specific WebSocket optimization mentioned, so performance may depend on general throughput.

What are the security risks of kernel-space zero-copy in vproxy?

Kernel-space optimizations can improve performance but require careful privilege management; running as root for automatic setup increases attack surface. Always follow least-privilege principles and audit configurations in production.

How to implement session-based IP sticking for testing?

Append '-session-id' to the username in authentication, e.g., 'username-session-123456'. This ensures the same IP is reused for that session, as shown in the curl examples with repeated requests returning identical IPs.

Is vproxy suitable for high-availability setups with failover?

vproxy focuses on single-instance performance and lacks built-in clustering or health check features. For high availability, you'd need to pair it with external load balancers or orchestration tools like Kubernetes.

vproxy — High-Performance Proxy Server

What is vproxy?

vproxy is a high-performance proxy server written in Rust that supports HTTP, HTTPS, and SOCKS5 protocols. It is designed for speed and flexibility, solving the need for a fast, multi-protocol proxy with advanced features like automatic protocol detection, sophisticated authentication, and granular IP management. It leverages kernel-space zero-copy techniques for maximum data transfer performance.

Target Audience

System administrators, network engineers, and developers who need a high-performance, multi-protocol proxy server for tasks like traffic routing, testing, or building network automation tools. It is particularly suited for users requiring advanced IP management features like session-based or TTL-based IP allocation.

Value Proposition

Developers choose vproxy for its raw performance through kernel-space optimizations and its unique combination of multi-protocol support on a single port with advanced authentication extensions. Its value lies in offering sophisticated IP control (session, TTL, range-based) alongside high-speed data transfer, which is benchmarked against other proxy solutions.

A high-performance HTTP/HTTPS/SOCKS5 proxy server

Use Cases

Best For

Setting up a high-performance SOCKS5 proxy server with full CONNECT, BIND, and ASSOCIATE command support.
Deploying a multi-protocol proxy (HTTP, HTTPS, SOCKS5) on a single port with automatic protocol detection.
Managing proxy IP addresses with granular control using session-based, TTL-based, or CIDR range-based authentication extensions.
Running a proxy server with IPv4 and IPv6 dual-stack support and binding to specific CIDR address ranges.
Benchmarking and comparing proxy server performance, as the project includes detailed performance tests against alternatives.
Creating a daemonized proxy service that can be managed via start, stop, restart, and log commands.

Not Ideal For

Projects requiring a web-based management interface or graphical configuration tools
Environments where kernel-space access and manual sysctl configuration are restricted, such as locked-down container orchestration platforms
Teams needing built-in caching, load balancing, or extensive plugin ecosystems beyond core proxying
Organizations avoiding GPL-3.0 licensed software due to licensing compliance concerns

Pros & Cons

Pros

Benchmark-Proven Performance

Leverages kernel-space zero-copy techniques to achieve over 140 Gbits/sec in throughput, as demonstrated in comparative benchmarks against hev-socks5-server and fast-socks5.

Unified Multi-Protocol Support

Handles HTTP, HTTPS, and SOCKS5 on a single port with auto-detection, eliminating the need to run separate servers for different proxy types.

Advanced IP Management

Offers session-based, TTL-based, and range-based authentication extensions for granular control over IP allocation, enabling scenarios like sticky sessions or IP rotation after a set number of requests.

Production-Ready Daemon

Includes built-in commands for starting, stopping, restarting, and logging daemon processes, making it suitable for service deployment without external process managers.

Cons

Manual IPv6 Configuration

Requires root privileges for automatic IPv6 setup; otherwise, users must manually configure sysctl settings and ip routes, which adds complexity and potential for errors.

Niche Authentication Complexity

Features like TTL and range-based extensions cater to specialized use cases but complicate authentication setup for standard username/password scenarios, increasing the learning curve.

Limited Ecosystem Integration

As a Rust-based project focused on core proxying, it lacks the extensive third-party plugins, monitoring tools, and community contributions found in more established proxies like Squid or HAProxy.

Frequently Asked Questions

What is vproxy?

Target Audience

Value Proposition

Use Cases

Best For

Setting up a high-performance SOCKS5 proxy server with full CONNECT, BIND, and ASSOCIATE command support.
Deploying a multi-protocol proxy (HTTP, HTTPS, SOCKS5) on a single port with automatic protocol detection.
Managing proxy IP addresses with granular control using session-based, TTL-based, or CIDR range-based authentication extensions.
Running a proxy server with IPv4 and IPv6 dual-stack support and binding to specific CIDR address ranges.
Benchmarking and comparing proxy server performance, as the project includes detailed performance tests against alternatives.
Creating a daemonized proxy service that can be managed via start, stop, restart, and log commands.

Not Ideal For

Projects requiring a web-based management interface or graphical configuration tools
Environments where kernel-space access and manual sysctl configuration are restricted, such as locked-down container orchestration platforms
Teams needing built-in caching, load balancing, or extensive plugin ecosystems beyond core proxying
Organizations avoiding GPL-3.0 licensed software due to licensing compliance concerns

Pros & Cons

Pros

Benchmark-Proven Performance

Leverages kernel-space zero-copy techniques to achieve over 140 Gbits/sec in throughput, as demonstrated in comparative benchmarks against hev-socks5-server and fast-socks5.

Unified Multi-Protocol Support

Handles HTTP, HTTPS, and SOCKS5 on a single port with auto-detection, eliminating the need to run separate servers for different proxy types.

Advanced IP Management

Production-Ready Daemon

Includes built-in commands for starting, stopping, restarting, and logging daemon processes, making it suitable for service deployment without external process managers.

Cons

Manual IPv6 Configuration

Requires root privileges for automatic IPv6 setup; otherwise, users must manually configure sysctl settings and ip routes, which adds complexity and potential for errors.

Niche Authentication Complexity

Features like TTL and range-based extensions cater to specialized use cases but complicate authentication setup for standard username/password scenarios, increasing the learning curve.

Limited Ecosystem Integration

As a Rust-based project focused on core proxying, it lacks the extensive third-party plugins, monitoring tools, and community contributions found in more established proxies like Squid or HAProxy.

Frequently Asked Questions

vproxy

What is vproxy?

Overview

Use Cases

Best For

Not Ideal For

Pros & Cons

Pros

Cons

Frequently Asked Questions

Related Projects

Found a gem we're missing?

vproxy

What is vproxy?

Overview

Use Cases

Best For

Not Ideal For

Pros & Cons

Pros

Cons

Frequently Asked Questions

Related Projects

Found a gem we're missing?