Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/hkparker/proxyd
proxyd proxies data between TCP, TLS, and unix sockets
https://github.com/hkparker/proxyd
Last synced: about 1 month ago
JSON representation
proxyd proxies data between TCP, TLS, and unix sockets
- Host: GitHub
- URL: https://github.com/hkparker/proxyd
- Owner: hkparker
- License: mit
- Created: 2015-11-09T00:20:46.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2017-05-11T04:58:43.000Z (about 7 years ago)
- Last Synced: 2024-04-08T17:00:24.610Z (3 months ago)
- Language: Go
- Homepage:
- Size: 1.88 MB
- Stars: 17
- Watchers: 2
- Forks: 6
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Lists
- awesome-go-security - proxyd - proxyd proxies data between TCP, TLS, and unix sockets (File Transfer)
- cybersecurity-golang-security - proxyd - proxyd proxies data between TCP, TLS, and unix sockets (File Transfer)
README
proxyd
======
proxyd proxies data between TCP, TLS, and unix sockets
```
TLS termination: Connecting to a remote application's unix socket:
+---------+ +----------+ +----------+
| | | | | |
->TLS -> TCP | | -> unix -+------>TLS -> unix |
| | | | | |
+---------+ +----------+ +----------+
_
Proxying through an encrypted pipe: | |
_ __ _ __ _____ ___ _ __| |
+---------+ +---------+ | '_ \| '__/ _ \ \/ / | | |/ _` |
| | | | | |_) | | | (_) > <| |_| | (_| |
->TCP -------+---> TLS -> TCP | | .__/|_| \___/_/\_\\__, |\__,_|
| | | | | | __/ |
+---------+ +---------+ |_| |___/
```
Usage
-----
```
$ proxyd --help
Usage of proxyd:
-config string
name of configuration file (default "proxyd_config.json")
```
proxyd takes a file with a configuration object that describes listeners and proxies. The object is in the form of a [`ServicePack`](https://github.com/hkparker/proxyd/blob/master/services.go#L17).
Examples
--------
Listen on a port and forward to another host
```json
[
{
"Front": "tcp://0.0.0.0:80",
"Back": "tcp://192.168.1.2:8080",
}
]
```
Accept TCP connections and forward to a local TLS server without verification
```json
[
{
"Front": "tcp://0.0.0.0:80",
"Back": "tls://127.0.0.1:443",
"BackConfig": {
"InsecureSkipVerify": "true"
}
}
]
```
Terminate TLS
```json
[
{
"Front": "tls://0.0.0.0:443",
"Back": "tcp://127.0.0.1:80",
"FrontConfig": {
"CERT": "-----BEGIN CERTIFICATE-----\n...",
"KEY": "-----BEGIN RSA PRIVATE KEY-----\n..."
}
}
]
```
Terminate TLS with client certificate verification
```json
```
Serve the same unix socket on 80 and 443 with TLS
```json
[
{
"Front": "tcp://0.0.0.0:80",
"Back": "unix:///tmp/ipc.sock"
},
{
"Front": "tls://0.0.0.0:443",
"Back": "unix:///tmp/ipc.sock",
"FrontConfig": {
"CERT": "-----BEGIN CERTIFICATE-----\n...",
"KEY": "-----BEGIN RSA PRIVATE KEY-----\n..."
}
}
]
```
Supported TLS features
----------------------
Tests
-----
```
$ go test -race -cover .
ok github.com/hkparker/proxyd 1.016s coverage: 59.6% of statements
```