Calamary - Forwarding- & Filtering-Proxy

Calamary is a squid-like proxy.

Its focus is set on transparent security filtering.

WARNING: This Project is still in early development. Have not had enough time to focus on it (yet).

Contributing

Feel free to contribute to this project!

Reporting issues, discussing implementation, extending documentation and adding unit-/integration-tests is very welcome!

Documentation

docs.calamary.net

Roadmap

• Listeners

  • Transparent

    • TCP
    • UDP

  • Proxy-Protocol

  • HTTP Proxy

  • HTTPS Proxy

  • SOCKS5 Proxy

  • Authentication

• Forwarding

  • TCP

    • HTTP

  • TLS

    • TLS Interception

  • UDP

    • QUIC

• YAML-based configuration

• Parsing

  • Basic

    • TCP

    • UDP

      • QUIC

    • TLS

      • ECH/ESNI handling (encrypted SNI)

    • Identify common protocols

  • Listener-Specific

    • Proxy-Protocol
    • HTTP Proxy
    • SOCKS5 Proxy

  • DNS

• Filtering

  • TCP

  • TLS

    • Certificate validation

  • HTTP

  • UDP

  • Matches

    • Config
    • Matching
    • Additional checks

  • DNS