A Go-based client-server proxy application that provides secure and obfuscated tunneling for network traffic. The system uses XOR cipher obfuscation and supports multiple transport protocols and proxy modes.

• Multiple Transport Protocols: TCP with TLS encryption and KCP (UDP-based) support
• Traffic Obfuscation: XOR cipher with shared key to obfuscate traffic patterns
• Multiple Proxy Modes: SOCKS5, HTTP, and transparent proxy support
• Cross-Platform: Works on Linux, macOS, and Windows (transparent mode Linux-only)
• TLS Encryption: Built-in TLS support for secure communication

• Go 1.24.6 or later
• For transparent proxy mode: Linux with iptables

Build both binaries:

./build.sh

Or build individually:

go build -o x-proxy-server cmd/server/main.go
go build -o x-proxy-client cmd/client/main.go

Generate TLS certificates for secure communication:

./generate-certs.sh

Create configuration files based on the examples:

Server Config (config.server.json):

{
  "listen_addr": ":8080",
  "key": "your-shared-secret-key",
  "transport": "tcp",
  "tls": {
    "cert_file": "certs/server.crt",
    "key_file": "certs/server.key"
  },
  "log_level": "info"
}

Client Config (config.client.json):

{
  "server_addr": "your-server:8080",
  "key": "your-shared-secret-key",
  "transport": "tcp",
  "tls": {
    "ca_file": "certs/ca.crt"
  },
  "modes": [
    {
      "type": "socks5",
      "listen_addr": ":1080"
    }
  ],
  "log_level": "info"
}

Start the server:

./x-proxy-server

Start the client:

./x-proxy-client

• cmd/: Main applications
  • server/: Server entry point
  • client/: Client entry point
• pkg/: Reusable packages
  • config/: Configuration loading
  • logger/: Logging utilities
  • obfuscator/: XOR cipher implementation
  • proxy/: Core proxy logic

1. Client receives local connections on configured proxy modes
2. Client obfuscates traffic using XOR cipher and forwards to server
3. Server deobfuscates traffic and forwards to target destinations
4. Responses follow reverse path with obfuscation

• Default transport protocol
• Uses TLS for encryption and authentication
• Reliable connection-oriented communication

• UDP-based transport protocol
• Better performance in high-latency or lossy networks
• Built-in Reed-Solomon error correction

Standard SOCKS5 proxy protocol supporting TCP connections.

HTTP proxy support for web traffic.

Transparent proxy mode that works with iptables for seamless traffic redirection.

Key external dependencies:

• github.com/xtaci/kcp-go: KCP transport protocol
• github.com/klauspost/reedsolomon: Reed-Solomon error correction
• golang.org/x/crypto, golang.org/x/net, golang.org/x/sys: Go extended libraries

• Always use strong, unique shared keys for obfuscation
• Use TLS transport for additional encryption layer
• Regularly rotate shared keys in production environments
• Monitor logs for suspicious activity
• Keep certificates up to date

[License information not specified]

[Contributing guidelines not specified]