proxyguard

codeberg.org · Egress and tunnels · 1 record · JSON

proxyguard Egress and tunnels

paidanonymousno cardD

codeberg.org/eduVPN/proxyguard · tool (wireguard transport) · egress/proxyguard · JSON · compare

Free tier	no service and no account; MIT-licensed client and server, packaged in the eduVPN server repository unit none; metered on none
Price	USD 0
Per-object cap	not applicable
Retention	not applicable
Egress	not applicable; the software states no volume; ingress: tcp free_allowance: none published
Identity	anonymous no account for the tool; the eduVPN ecosystem around it issues accounts separately
Binding	none the constraint is a server host, mitigated by the fact that it is designed to sit behind a reverse proxy on an existing HTTPS port
Interface	cli proxyguard-client --to http://host ; proxyguard-server --listen --to
Tooling	make install adds systemd units; DEB and RPM packages in the eduVPN repo
Composes with	rides any HTTPS reverse proxy, so it composes with a host that already serves a website and with a CDN that passes an Upgrade header.
Reliability	client requires TLS 1.3 or newer; on Linux --fwmark may be needed to avoid a routing loop, and that flag needs root or CAP_NET_ADMIN
Notes	The most institutionally-backed wrapper: it ships in eduVPN's server packages and is the WireGuard-over-TCP path their own apps use. The reverse-proxy design is the practical difference from wstunnel: because it speaks HTTP with an Upgrade handshake, it can share port 443 with a normal web server, so it needs a host that already exists rather than a dedicated one. It also names mullvad/udp-over-tcp as its ancestor.
Evidence rung	documented a measured run through an nginx or HAProxy front would raise it; eduVPN publishes deployment docs but no throughput figure
Checked	2026-10-23 (live); stale on 2026-11-22
Parsed numbers	`$.price_per_tb_month` price-per-tb USD0.0 TB / month

Evidence (4)

date	source	what it proved
2026-10-23	codeberg.org/eduVPN/proxyguard/raw/branch/main/README.md	"proxy UDP connections over HTTP(s). The main use case is to proxy WireGuard packets" and "This proxy thus needs to run for every client and for a server"
2026-10-23	codeberg.org/eduVPN/proxyguard/raw/branch/main/README.md	"This project started with a UDP to TCP approach, but later moved to HTTP for use behind a reverse proxy"
2026-10-23	codeberg.org/eduVPN/proxyguard/releases	release 2.1.1 published 2026-08-26
2026-10-23	codeberg.org/eduVPN/proxyguard/raw/branch/main/README.md	"The goal of this project is NOT to work around intentional state/organizational network blocks/censorship"

More fields (10)

{
 "wg_path": "none",
 "wg_detail": "client listens on 127.0.0.1:51821 and the WireGuard config sets Endpoint = 127.0.0.1:51821; server runs 'proxyguard-server --listen 0.0.0.0:51821 --to 127.0.0.1:51820'",
 "ingress": "tcp",
 "volume_tib_month": null,
 "volume_stated": "not applicable; the software states no volume",
 "bytes_transit": "yes",
 "transit_note": "through the server half, which forwards to the local WireGuard port",
 "hosting_requirement": "a server host with an HTTP listener, preferably behind a reverse proxy on 443; the client half runs on the device",
 "last_release": "2.1.1 2026-08-26",
 "stars": null
}

Unknown or withheld values (2)

$.per_object_cap.stated not-applicable
$.retention.stated not-applicable