Windows Network Redirection AGPL-3.0 • Open Source
1.6k v2.6.4

ProxiFyre: Transparent TCP & UDP SOCKS5 Proxifier

A high-performance transparent proxying utility for Windows that operates interactively in a console, as a background Windows Service, or through its desktop management GUI. Routes application TCP, UDP, and QUIC connections through SOCKS5 proxies without modifying application binaries or changing system-wide proxy settings.

Download ProxiFyre → View on GitHub ← All Tools & Ecosystem
Platform: Windows 11: x64, ARM64; Windows 10 / 8.1 / 7 SP1: x64, x86
Prerequisites: .NET Framework 4.7.2+ (x86/x64) / 4.8.1+ (ARM64) • WinpkFilter
Protocols: TCP • UDP • QUIC • SOCKS5 • TLS
Companion: Alighieri SOCKS5
Core Engineering

Transparent Interception via Windows Packet Filter

ProxiFyre integrates directly into the Windows network stack through Windows Packet Filter (WinpkFilter). By capturing and injecting packets at the NDIS Lightweight Filter layer, ProxiFyre redirects raw IP packets without relying on LSP hooks, WFP injection bugs, or virtual TAP/TUN adapters.

ARCHITECTURE BLUEPRINT

Transparent Interception & SOCKS5 Routing Flow

WinpkFilter NDIS LWF • RFC 1928 SOCKS5
ProxiFyre Transparent Interception & SOCKS5 Routing Flow Diagram showing applications generating traffic intercepted at the NDIS layer by Windows Packet Filter, processed by the ProxiFyre engine, and forwarded via SOCKS5 TCP CONNECT or UDP ASSOCIATE. Optional TLS protects TCP streams and UDP control connections, while UDP relay datagrams remain outside TLS. APPLICATION LAYER Target Applications Matches app-config.json chrome.exe / msedge Web browsers, HTTPS / QUIC curl.exe / git.exe CLI tools & build agents Custom Processes Wildcard path matching KERNEL DATA PLANE Windows Packet Filter ndisrd.sys (NDIS 6.x) Packet Interception Intercepts TCP & UDP datagrams Process Association Correlates sockets to binary PID Zero Virtual Adapters No TAP/TUN, clean routing table USERSPACE PROXY ENGINE ProxiFyre Service & GUI ProxiFyre.exe (Service / CLI) Rule Matching Matrix Per-app proxy selection & bypass Deferred Process Resolution Asynchronous PID correlation SOCKS5 / TLS Session Credential auth & TLS wrappers EGRESS TUNNEL Upstream Proxy e.g. Alighieri / Dante TCP CONNECT Full-duplex stream UDP ASSOCIATE Datagram relay Optional TLS TCP + UDP control
Transparent Interception: ProxiFyre monitors network traffic at the NDIS Lightweight Filter layer via Windows Packet Filter. Connections initiated by specified applications are transparently redirected through SOCKS5 without modifying application binaries or changing system-wide proxy settings. Optional TLS protects TCP streams and UDP control connections; UDP relay datagrams are not wrapped in TLS.

Transparent Redirection

Enables proxy support for applications that have no native SOCKS configuration. Captures both TCP streams and UDP datagrams seamlessly at the network layer.

Per-Application Rules

Direct specific processes to designated proxies while allowing other traffic to bypass. Supports executable-name matching, path substring matching, and ordered catch-all fallback rules.

SOCKS5-over-TLS

Protects SOCKS5 TCP streams and the UDP ASSOCIATE control connection with TLS and server certificate validation. SOCKS5 UDP relay datagrams travel separately and are not encrypted by this TLS transport.

IPv4 & IPv6 Dual Stack

Proxies IPv4 and IPv6 destinations through an IPv4-reachable SOCKS5 endpoint. IPv6 targets require client IPv6 connectivity and server support; fragmented IPv6 datagrams remain direct.

Console, Service & GUI

Run interactively in a console for testing, deploy as an unattended background Windows Service, or manage rules and service state through the desktop GUI.

Alighieri Companion

Pairs seamlessly with Alighieri, our modern asynchronous Rust SOCKS5 server, providing a compatible SOCKS5-over-TLS endpoint and granular access control.

Getting Started

Three Ways to Use ProxiFyre

ProxiFyre is a transparent TCP and UDP SOCKS5 proxifier for Windows that can run interactively or as a Windows service. Its management GUI provides a convenient way to configure and control the service. All workflows use the same app-config.json routing configuration and Windows Packet Filter for transparent packet interception.

Unified Configuration: app-config.json Whether launched from an administrator console, registered as a background system service, or managed through the GUI, ProxiFyre reads its proxy endpoints, application routing rules, transport modes (TCP / TLS), and bypass lists from the identical JSON configuration file located next to the executable.

Interactive Console

Direct foreground execution for debugging or testing. ProxiFyre requires elevation by default; --allow-not-admin enables limited console operation after WinpkFilter is installed. Process attribution is best effort in this mode, and traffic with an unresolved owner remains direct.

# Run interactively (Administrator) ProxiFyre.exe Reads local app-config.json and prints live logs to stdout. Press Ctrl+C to terminate.

Windows Service

Run packet redirection as the background ProxiFyreService without an active desktop logon session. The installer uses manual start; automatic startup depends on the configured service start type.

# Install and manage service ProxiFyre.exe install ProxiFyre.exe start ProxiFyre.exe stop ProxiFyre.exe uninstall

GUI + Service

Desktop management frontend (ProxiFyreUI.exe) for editing configuration and controlling ProxiFyreService. The service handles packet redirection.

1. Launch GUI: Run ProxiFyreUI.exe with administrator elevation.
2. Configure Rules: Add SOCKS5 proxies, target processes, and LAN bypass.
3. Validate: Click Validate to check configuration syntax and rule consistency.
4. Apply: Click Apply & Restart to reload the background service.
Explore Source Code & Documentation on GitHub →