AutoProxy

Auto choose proxy or not by rules.

• TCP connections are automatically proxied or directly connected according to the rules.
• UDP packets are sent directly to the destination address or via a proxy, based on matching rules for the destination address.
• DNS server, according to the rules, directly resolves to the upstream DNS or goes through a proxy to resolve to the upstream DNS.
• Optional hosts files can override DNS answers and force TCP domain connections to use a fixed IP directly.

Usage

./autoproxy --config autoproxy.toml

Hosts override

You can configure optional hosts files in autoproxy.toml:

hosts_ipv4 = "config/hosts4.txt"
hosts_ipv6 = "config/hosts6.txt"

The format is the same as /etc/hosts, one IP and one domain per line:

1.2.3.4 example.com
2408::1 example.com

When a domain matches a hosts entry:

• DNS A/AAAA queries return the configured address directly.
• TCP proxy connections use the configured IP directly and keep the original port.

Proxy groups

proxy is the default group. Additional named groups can be configured with [proxy_groups.<name>]; every group needs both an HTTP and a SOCKS5 address:

proxy = { http = "127.0.0.1:18080", socks5 = "127.0.0.1:11080" }

[proxy_groups.us]
http = "127.0.0.1:28080"
socks5 = "127.0.0.1:21080"

A rule without group uses the default group; group selects one of the named groups:

rules = [
    { type = "DomainKeyword", keyword = "google", rule = "Proxy", group = "us" },
    { type = "Direct", rule = "Proxy" },
]

group is only valid with rule = "Proxy"; an unknown group fails at startup. The name default is reserved for the proxy section. Keep the [proxy_groups.*] table headers after every top-level key, because in TOML the keys that follow a table header belong to that table.

HTTP and SOCKS5 TCP connections follow the rule's group. DNS queries and SOCKS5 UDP currently keep using the default group's SOCKS5 address.

Domain rule files

DomainSuffixSet uses a plain text file with one suffix per line. Empty lines are ignored, and lines starting with # are comments.

cn
example.com
# internal domains
corp.local

Some well-known domains list:

• Anti-AD domains: anti-ad-domains.txt
• CN domains: cn-domains.txt
• Other domains(apple/google): get from here, some conversions are required

GeoIP2 MMDB

You can get Country.mmdb from here.

Work with stunnel and gatewaysocks

• stunnel
• gatewaysocks

    ----------------                 -------------                        -------------
    |              |                 |           |                        |           |
    | gatewaysocks | --- TCP/UDP --> | autoproxy | ------- TCP/UDP -----> |  stunnel  |
    |              |                 |           |    |                   |           |
    ----------------                 -------------    |                   -------------
           ^                               ^          |
           |                               |          |                   -------------
           |                               |          |                   |           |
           |                               |          |--- TCP/UDP -----> |  direct   |
           |                               |                              |           |
           |                               |                              -------------
    -----------------             ------------------
    |    devices    |             |   set system   |
    |  in the same  |             | proxy settings |
    |    router     |             |  to autoproxy  |
    -----------------             ------------------