Ross ROSS = Recommend OSS · open-source software intelligence for agents

darkk/redsocks

transparent TCP-to-proxy redirector observed · 2026-08-28

github.com/darkk/redsocks · homepage · C observed · 2026-08-28

Health v2 · maintenance only

32/100

  • Activity 0
  • Release rhythm 35
  • Longevity 100

Flags: no_releases no_license

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 6589
  • days_rel: n/a
  • days_push: 795
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

3617 stars · 900 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

redsocks is a transparent TCP-to-proxy redirector written in C that uses firewall rules (iptables, pf, ipfw) to redirect any TCP connection through SOCKS4, SOCKS5, or HTTPS (HTTP/CONNECT) proxies. It runs as a daemon on Linux/BSD systems and supports proxy authentication plus a fake DNS server that forces resolvers to fall back to TCP.

Use cases

  • redirect all system TCP traffic through a SOCKS5 proxy using iptables
  • route traffic through an OpenSSH DynamicForward SOCKS port via firewall policies
  • make a non-transparent proxy work transparently on a Linux router
  • force DNS queries over TCP so they can be proxied
  • pass traffic through a corporate proxy without configuring each application
  • use a DVB ISP accelerator proxy that lacks transparent proxy support

When to choose

  • you need system-wide or network-wide proxy redirection on Linux/BSD with firewall control
  • your proxy is SOCKS4/5 or HTTPS CONNECT and apps don't natively support proxies
  • you run a router (e.g., OpenWrt) and want to route selected traffic through a proxy

When to avoid

  • you want to redirect traffic to Tor - use Tor's TransPort or tor-aware software instead
  • you need to proxy many connections over a single SSH tunnel (head-of-line blocking degrades performance)
  • you need a truly transparent proxy at the connection level - redsocks completes the local TCP handshake first
  • you're on Android/iOS without root - use VpnService/NETunnelProvider-based apps instead
  • you rely on the http-relay module for plain HTTP proxies - it's hacky and vulnerable to CVE-2009-0801

Facets

cli-tool · maturity maintenance

proxy networking security privacy networking privacy security self-hosted bsd cli transparent-proxy socks5 iptables traffic-redirection c linux android

2 sources

Member repositories

RepositoryRoleHealth v2
darkk/redsocksmain32

For agents

markdown · JSON · MCP: product_card(name="darkk/redsocks")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem