Calamary - Forwarding- & Filtering-Proxy

Calamary is a squid-like proxy.

Its focus is set on transparent security filtering.

Contributing

Feel free to contribute to this project!

Reporting issues, discussing implementation, extending documentation and adding unit-/integration-tests is very welcome!

Documentation

docs.calamary.net

Roadmap

• Listeners

  • Transparent

    • TCP
    • UDP

  • Proxy-Protocol

  • HTTP Proxy

  • HTTPS Proxy

  • SOCKS5 Proxy

  • Authentication

• Forwarding

  • TCP

    • HTTP

  • TLS

    • TLS Interception

  • UDP

    • QUIC

• YAML-based configuration

• Parsing

  • Basic

    • TCP

    • UDP

      • QUIC

    • TLS

      • ECH/ESNI handling (encrypted SNI)

    • Identify common protocols

  • Listener-Specific

    • Proxy-Protocol
    • HTTP Proxy
    • SOCKS5 Proxy

  • DNS

• Filtering

  • TCP

  • TLS

    • Certificate validation

  • HTTP

  • UDP

  • Matches

    • Config
    • Matching
    • Additional checks

  • DNS