g3proxy

The software is a generic forward proxy written in async Rust, offering support for HTTP 1, SOCKS5, SNI proxy, and TCP TPROXY. It can operate as a standard forward proxy, a transparent proxy, or a basic reverse proxy, and includes features such as proxy chaining with dynamic upstream selection, multiple egress routing methods, and customizable load‑balancing and failover strategies. TLS handling is extensive, supporting OpenSSL, BoringSSL, AWS‑LC, Tongsuo, and rustls, with optional MITM interception for decrypting and dumping traffic across HTTP 1, HTTP 2, IMAP, and SMTP, as well as ICAP adaptation for integration with security products.

The system provides fine‑grained access control, user authentication, per‑user site configuration, and rich ACL/limit rules at ingress, egress, and user levels. Monitoring is built in, exposing metrics for various dimensions and compatible with common observability tools. Configuration is managed through a set of subdirectories and documentation, and the project supplies auxiliary tools for certificate generation, IP location lookup, and statistics aggregation.

It is self‑hostable, open‑source under the Apache‑2.0 license, and runs on Linux with support for macOS, Windows, and BSD variants. The code is stable, includes graceful reload capability, and is designed for enterprise‑oriented proxy deployments without subscription or tier restrictions.