wireguard-proxy
github.com · Egress and tunnels · 1 record · JSON
wireguard-proxy (moparisthebest) Egress and tunnels
paidanonymousno cardD
| Free tier | no service and no account; source and static builds unit none; metered on none |
|---|---|
| Price | USD 0 |
| Per-object cap | not applicable |
| Retention | not applicable |
| Egress | not applicable; the software states no volume; ingress: tcp free_allowance: none published |
| Identity | anonymous no account; a server-side daemon and a client-side daemon on hosts the operator controls |
| Binding | none the constraint is a server-side host, plus an unmaintained codebase, neither of which the vocabulary covers |
| Interface | cli wireguard-proxy -tt / -th daemons |
| Tooling | cargo, static builds in releases, AUR package |
| Composes with | plain TCP or TLS, so it can ride a TCP forwarder that hands over a raw stream; it cannot ride an HTTP-only CDN because it never speaks an HTTP upgrade. |
| Reliability | unmaintained; --tls without --pinnedpubkey authenticates nothing |
| Notes | Functionally the cleanest of the plain TCP wrappers and the only one whose TLS warning is honest about doing nothing by default. Five years without a commit makes it a reference implementation, not a recommendation. TLS mode needs a certificate at the server end. |
| Evidence rung | documented nothing would raise the maintenance rung; the last code change was 2020 and the last release tag is 'beta' from 2021 |
| Checked | 2026-10-23 (live); stale on 2026-11-22 |
| Parsed numbers |
|
Evidence (3)
| date | source | what it proved |
|---|---|---|
| 2026-10-23 | github.com/moparisthebest/wireguard-proxy | the two modes and the -uh default of 127.0.0.1:51820 in client mode |
| 2026-10-23 | github.com/moparisthebest/wireguard-proxy | release tag 'beta' published 2021-05-22; last push 2020-11-27; 96 stars |
| 2026-10-23 | github.com/moparisthebest/wireguard-proxy | "--tls WARNING: authenticates/verifies nothing without --pinnedpubkey below!!" |
More fields (10)
{
"wg_path": "none",
"wg_detail": "\"Proxy wireguard UDP packets over TCP/TLS\"; client mode listens on 127.0.0.1:51820 by default and the WireGuard peer points at it",
"ingress": "tcp",
"volume_tib_month": null,
"volume_stated": "not applicable; the software states no volume",
"bytes_transit": "yes",
"transit_note": "server daemon pipes to the local WireGuard UDP port",
"hosting_requirement": "a publicly reachable host running the server daemon, plus the client daemon on the device",
"last_release": "beta 2021-05-22",
"stars": 96
}Unknown or withheld values (2)
$.per_object_cap.statednot-applicable$.retention.statednot-applicable