https://github.com/n0-computer/iroh-proxy-utils
Utiltity functions for building network proxies with iroh
https://github.com/n0-computer/iroh-proxy-utils
Last synced: about 2 months ago
JSON representation
Utiltity functions for building network proxies with iroh
- Host: GitHub
- URL: https://github.com/n0-computer/iroh-proxy-utils
- Owner: n0-computer
- License: apache-2.0
- Created: 2025-10-31T15:51:51.000Z (8 months ago)
- Default Branch: main
- Last Pushed: 2026-02-24T11:27:59.000Z (4 months ago)
- Last Synced: 2026-02-24T16:33:31.940Z (4 months ago)
- Language: Rust
- Size: 382 KB
- Stars: 3
- Watchers: 0
- Forks: 1
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE-APACHE
Awesome Lists containing this project
README
# iroh-proxy-utils
[](https://crates.io/crates/iroh-proxy-utils)
[](https://docs.rs/iroh-proxy-utils)
[](https://crates.io/crates/iroh-proxy-utils)
Primitives for TCP and HTTP proxying over [iroh](https://github.com/n0-computer/iroh) connections.
## Status
Work in progress. API subject to change.
## Overview
This crate provides two main components for building HTTP proxies that bridge TCP and HTTP over iroh:
* The **DownstreamProxy** accepts TCP connections and forwards them over iroh. Supports both forward proxy mode (client specifies destination via absolute-form requests or HTTP `CONNECT`) and reverse proxy mode (destination extracted from origin-form requests). For all modes, the upstream proxy's iroh endpoint id is either set statically in the proxy configuration, or extracted from the HTTP request. Destination extraction is provided via a trait that must be implemented by user code.
* The **UpstreamProxy** implements an iroh `ProtocolHandler` that accepts proxied streams from iroh connections, authorizes them via a pluggable `AuthHandler`, and forwards to TCP origins. Handles both CONNECT tunneling and absolute-form HTTP requests.
## Protocol
The downstream and upstream proxy establish iroh connections with the ALPN identifier `iroh-http-proxy/1`. On each connections, the downstream proxy can open any number of bidirectional streams. Each bidirectional stream contains a HTTP/1.1 connection. Each of these may either be a `CONNECT` request to establish a tunnel to an origin from the upstream proxy, or a absolute-form request which is forwarded to its origin by the upstream proxy.
## License
Copyright 2025 N0, INC.
This project is licensed under either of
* Apache License, Version 2.0, ([LICENSE-APACHE](LICENSE-APACHE) or
http://www.apache.org/licenses/LICENSE-2.0)
* MIT license ([LICENSE-MIT](LICENSE-MIT) or
http://opensource.org/licenses/MIT)
at your option.
## Contribution
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in this project by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.