Wireproxy is a userspace Wireguard client that exposes itself as a SOCKS5 or HTTP proxy.
The tool solves the problem of routing traffic through a Wireguard connection without requiring root permissions or creating a new network interface. It runs entirely in userspace, connecting to a Wireguard peer and exposing a proxy that applications can use selectively. This approach lets users route specific traffic through a remote Wireguard server while keeping the rest of their network configuration unchanged. The proxy supports TCP static routing, SOCKS5 and HTTP CONNECT tunneling, and transparent TLS proxying via SNI inspection. A health monitoring endpoint can expose Wireguard daemon metrics and check connectivity to specified addresses via ping.
Wireproxy suits developers and users who want selective traffic routing through Wireguard without system-level configuration. It works well for scenarios like routing browser traffic to specific sites through a remote peer, or any situation where you need Wireguard connectivity without elevated privileges. The tool is particularly useful on systems where creating new network interfaces is impractical or where you want isolation between your normal network and proxied traffic. It requires no special setup beyond a Wireguard configuration file and can be run as an unprivileged user.
The project has attracted a substantial base of real-world users who report issues from production use. However, responses to issues and pull requests often take weeks or longer, indicating limited maintainer availability. Enhancement requests dominate the issue tracker, suggesting users are actively requesting new capabilities rather than reporting critical bugs.
