{"id":37166600,"url":"https://github.com/nothinux/octo-proxy","last_synced_at":"2026-01-14T19:44:18.418Z","repository":{"id":57706925,"uuid":"500860308","full_name":"nothinux/octo-proxy","owner":"nothinux","description":"🐙 Simple TCP/TLS Proxy support mutual authentication and traffic mirroring","archived":false,"fork":false,"pushed_at":"2023-09-10T11:25:25.000Z","size":113,"stargazers_count":49,"open_issues_count":2,"forks_count":7,"subscribers_count":2,"default_branch":"main","last_synced_at":"2024-06-19T01:53:43.694Z","etag":null,"topics":["golang","monitoring","mtls","proxy","reverse-proxy","tcp","tcp-proxy","tls","traffic-mirroring"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nothinux.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-06-07T13:50:19.000Z","updated_at":"2024-05-01T17:58:02.000Z","dependencies_parsed_at":"2024-06-19T01:29:39.986Z","dependency_job_id":null,"html_url":"https://github.com/nothinux/octo-proxy","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/nothinux/octo-proxy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nothinux%2Focto-proxy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nothinux%2Focto-proxy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nothinux%2Focto-proxy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nothinux%2Focto-proxy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nothinux","download_url":"https://codeload.github.com/nothinux/octo-proxy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nothinux%2Focto-proxy/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28432697,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-14T18:57:19.464Z","status":"ssl_error","status_checked_at":"2026-01-14T18:52:48.501Z","response_time":107,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["golang","monitoring","mtls","proxy","reverse-proxy","tcp","tcp-proxy","tls","traffic-mirroring"],"created_at":"2026-01-14T19:44:17.739Z","updated_at":"2026-01-14T19:44:18.393Z","avatar_url":"https://github.com/nothinux.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# 🐙 Octo-Proxy  \nOcto-proxy or `octo` is simple TCP \u0026 TLS Proxy with mutual authentication and traffic mirroring/shadowing support.\n\n[![Go Report Card](https://goreportcard.com/badge/github.com/nothinux/octo-proxy)](https://goreportcard.com/report/github.com/nothinux/octo-proxy)  ![test status](https://github.com/nothinux/octo-proxy/actions/workflows/test.yml/badge.svg?branch=main)  [![codecov](https://codecov.io/gh/nothinux/octo-proxy/branch/main/graph/badge.svg?token=HBRTW7DX0K)](https://codecov.io/gh/nothinux/octo-proxy)\n\n### Feature\n- Accept TCP connection and forward/mirror it to TCP\n- Accept TCP connection and forward/mirror it to TLS (w/ mTLS)\n- Accept TLS (w/ mTLS) connection and forward/mirror it to TCP\n- Accept TLS (w/ mTLS) connection and forward/mirror it to TLS (w/ mTLS)\n- Support for multiple targets, accessed in random order (load balancer)\n- Reload configuration or certificate without dropping connection\n- Expose metrics that can be consumed by prometheus\n\n### Usage\n#### Run octo with ad-hoc command\n```\nocto-proxy -listener 127.0.0.1:8080 -target 127.0.0.1:80\n```\n\nRun with `-debug` to get a more verbose log output.\n\n#### Run Octo as TCP Proxy with metrics on port 9123\n``` yaml\n// config.yaml\nservers:\n- name: web-proxy\n  listener:\n    host: 127.0.0.1\n    port: 8080\n  targets:\n    - host: 127.0.0.1\n      port: 80\n    - host: 127.0.0.1\n      port: 81\n\nmetrics:\n  host: 0.0.0.0\n  port: 9123\n```\n\n```\nocto -config config.yaml\n```\n\n#### Run Octo as TLS Proxy w/ mTLS\n``` yaml\n// config.yaml\nservers:\n- name: web-proxy\n  listener:\n    host: 0.0.0.0\n    port: 8080\n    tls:\n      mode: mutual\n      caCert: /tmp/ca-cert.pem\n      cert: /tmp/cert.pem\n      key: /tmp/cert-key.pem\n  targets:\n    - host: 127.0.0.1\n      port: 80\n\nmetrics:\n  host: 0.0.0.0\n  port: 9123\n```\n\n```\nocto-proxy -config config.yaml\n```\n\n#### Run Octo as TLS Proxy and Mirror traffic to other backend\n``` yaml\n// config.yaml\nservers:\n- name: web-proxy\n  listener:\n    host: 0.0.0.0\n    port: 8080\n    tls:\n      mode: simple\n      cert: /tmp/cert.pem\n      key: /tmp/cert-key.pem\n  targets:\n    - host: 127.0.0.1\n      port: 80\n  mirror:\n    host: 172.16.0.1\n    port: 80\n```\n\n```\nocto-proxy -config config.yaml\n```\n\nSee all configuration in [CONFIGURATION.md](https://github.com/nothinux/octo-proxy/tree/master/docs/CONFIGURATION.md)\n\n### Reloading Octo-proxy\nAfter changing configuration or certificates, send signal `SIGUSR1` or `SIGUSR2` to `octo-proxy` process. Configuration will be reloaded if the configuration is valid.\n\nOcto-proxy use `SO_REUSEPORT` to binding the listener, so every reload triggered octo-proxy will create new listener and drop old listener after new listener created, by using this approach octo-proxy can minimize dropped connection when reload triggered.\n\n### Monitoring\nMetrics are configured through the `metrics` section in the config file and are served under the `/metrics` path of the configured host and port.\n\n### LICENSE\n[LICENSE](https://github.com/nothinux/octo-proxy/blob/main/LICENSE.md)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnothinux%2Focto-proxy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnothinux%2Focto-proxy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnothinux%2Focto-proxy/lists"}