inetaf/tcpproxy

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1296 stars · 161 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Go library and CLI (tlsrouter) for building TCP proxies that route connections based on static rules, HTTP/1 Host headers, and TLS SNI server names. It lets a single listener multiplex connections to different backends without terminating TLS.

Use cases

• route TCP connections to different backends based on SNI server name
• multiplex HTTP traffic on port 80 by Host header
• run a TLS router that forwards connections without decrypting traffic
• proxy multiple domains on one IP address
• build a custom TCP load balancer in Go
• forward port 443 traffic to different services per hostname

When to choose

• you need SNI- or Host-header-based routing at the TCP layer without TLS termination
• you want a lightweight Go library to embed proxying in your own application
• you need to serve multiple backends behind a single IP/port

When to avoid

• you need a full-featured L7 reverse proxy with load balancing, health checks, and middleware (use HAProxy, nginx, or Caddy)
• you need HTTP request rewriting or response manipulation
• you need UDP proxying

Facets

library · maturity stable

proxy networking routing http-server cli networking backend developer-tools infrastructure-as-code go windows cross-platform cli tcp-proxy sni-routing http-host-routing tls-router load-balancing linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="inetaf/tcpproxy")