Home / Egress and tunnels
wireguard-proxy (moparisthebest)
github.com/moparisthebest/wireguard-proxyTool (wireguard transport)egress/wireguard-proxyJSONcomparereport an errorprovider JSON
- Free allowance
- No service and no account; source and static builds
- Verdict
- self-hosted, last resortverdict paid-only: no free allowance; listed for its price. Self-hosted options are listed last, because this site is for users who have no hardware.
- Cost
- no price statedsee Price below
- Identity
- anonymousno card, no phone
- Binding limit
- noneno named constraint binds
- Evidence
- documented3 sources; a first-party page was read and the sentence quoted
- Freshness
- stale on 2026-11-23checked 2026-10-23 (live); stale on 2026-11-23
| Free tier | no service and no account; source and static builds unit none; metered on none |
|---|
| Price | USD 0 |
|---|
| Binding | none the constraint is a server-side host, plus an unmaintained codebase, neither of which the vocabulary covers |
|---|
| Identity | anonymous no account; a server-side daemon and a client-side daemon on hosts the operator controls |
|---|
| Egress | not applicable; the software states no volume; ingress: tcp free allowance: none published |
|---|
| Interface | cli wireguard-proxy -tt / -th daemons |
|---|
| Tooling | cargo, static builds in releases, AUR package |
|---|
| Composes with | plain TCP or TLS, so it can ride a TCP forwarder that hands over a raw stream; it cannot ride an HTTP-only CDN because it never speaks an HTTP upgrade. |
|---|
| Reliability | unmaintained; --tls without --pinnedpubkey authenticates nothing |
|---|
| Notes | Functionally the cleanest of the plain TCP wrappers and the only one whose TLS warning is honest about doing nothing by default. Five years without a commit makes it a reference implementation, not a recommendation. TLS mode needs a certificate at the server end. |
|---|
| Evidence note | documented nothing would raise the maintenance rung; the last code change was 2020 and the last release tag is 'beta' from 2021 |
|---|
| Parsed numbers | - has-free-tier 0
- price USD 0
|
|---|
Evidence 3
More fields 9
| wg path | none |
|---|
| wg detail | "Proxy wireguard UDP packets over TCP/TLS"; client mode listens on 127.0.0.1:51820 by default and the WireGuard peer points at it |
|---|
| ingress | tcp |
|---|
| volume stated | not applicable; the software states no volume |
|---|
| bytes transit | yes |
|---|
| transit note | server daemon pipes to the local WireGuard UDP port |
|---|
| hosting requirement | a publicly reachable host running the server daemon, plus the client daemon on the device |
|---|
| last release | beta 2021-05-22 |
|---|
| stars | 96 |
|---|
Unknown values 2
- per object cap stated: the field does not apply to this kind of offer
- retention stated: the field does not apply to this kind of offer