Windows Network Redirection AGPL-3.0 • Open Source
1.6k v2.6.2

ProxiFyre: Transparent TCP & UDP SOCKS5 Proxifier

A high-performance transparent proxying utility for Windows that operates interactively in a console, as a background Windows Service, or through its desktop management GUI. Routes application TCP, UDP, and QUIC connections through SOCKS5 proxies without modifying application binaries or changing system-wide proxy settings.

Download ProxiFyre → View on GitHub ← All Tools & Ecosystem
Platform: Windows 11 / 10 / 8.1 / 7 SP1 (x64, x86, ARM64)
Prerequisites: .NET Framework 4.7.2+ (x86/x64) / 4.8.1+ (ARM64) • WinpkFilter
Protocols: TCP • UDP • QUIC • SOCKS5 • TLS
Companion: Alighieri SOCKS5
Core Engineering

Transparent Interception via Windows Packet Filter

ProxiFyre integrates directly into the Windows network stack through Windows Packet Filter (WinpkFilter). By capturing and injecting packets at the NDIS Lightweight Filter layer, ProxiFyre redirects raw IP packets without relying on LSP hooks, WFP injection bugs, or virtual TAP/TUN adapters.

ARCHITECTURE BLUEPRINT

Transparent Interception & SOCKS5 Routing Flow

WinpkFilter NDIS LWF • RFC 1928 SOCKS5
ProxiFyre Transparent Interception & SOCKS5 Routing Flow Diagram showing applications generating traffic intercepted at the NDIS layer by Windows Packet Filter, processed by the ProxiFyre engine, and forwarded via SOCKS5 TCP CONNECT, UDP ASSOCIATE, or SOCKS5-over-TLS. APPLICATION LAYER Target Applications Matches app-config.json chrome.exe / msedge Web browsers, HTTPS / QUIC curl.exe / git.exe CLI tools & build agents Custom Processes Wildcard path matching KERNEL DATA PLANE Windows Packet Filter ndisrd.sys (NDIS 6.x) Packet Interception Intercepts TCP & UDP datagrams Process Association Correlates sockets to binary PID Zero Virtual Adapters No TAP/TUN, clean routing table USERSPACE PROXY ENGINE ProxiFyre Service & GUI ProxiFyre.exe (Service / CLI) Rule Matching Matrix Per-app proxy selection & bypass Deferred Process Resolution Asynchronous PID correlation SOCKS5 / TLS Session Credential auth & TLS wrappers EGRESS TUNNEL Upstream Proxy e.g. Alighieri / Dante TCP CONNECT Full-duplex stream UDP ASSOCIATE Datagram relay TLS Encryption SOCKS5-over-TLS
Transparent Interception: ProxiFyre monitors network traffic at the NDIS Lightweight Filter layer via Windows Packet Filter. Connections initiated by specified application binaries are transparently intercepted and encapsulated into standard SOCKS5 or TLS-encrypted tunnels without modifying application binaries or changing system-wide proxy settings.

Transparent Redirection

Enables proxy support for applications that have no native SOCKS configuration. Captures both TCP streams and UDP datagrams seamlessly at the network layer.

Per-Application Rules

Direct specific processes to designated proxies while allowing other traffic to bypass. Supports executable path filtering, wildcards, and catch-all fallback rules.

SOCKS5-over-TLS

Encrypts SOCKS5 control and data channels using TLS. Prevents intermediary inspection and tampering across public Wi-Fi and untrusted networks.

IPv4 & IPv6 Dual Stack

Full dual-stack proxying support. Handles IPv4 and IPv6 connections uniformly across local interfaces and remote SOCKS5 destinations.

Console, Service & GUI

Run interactively in a console for testing, deploy as an unattended background Windows Service, or manage rules and service state through the desktop GUI.

Alighieri Companion

Pairs seamlessly with Alighieri, our modern asynchronous Rust SOCKS5 server, providing end-to-end TLS encryption and granular access control.

Getting Started

Three Ways to Use ProxiFyre

ProxiFyre is a transparent TCP and UDP SOCKS5 proxifier for Windows that can run interactively or as a Windows service. Its management GUI provides a convenient way to configure and control the service. All workflows use the same app-config.json routing configuration and Windows Packet Filter for transparent packet interception.

Unified Configuration: app-config.json Whether launched from an administrator console, registered as a background system service, or managed through the GUI, ProxiFyre reads its proxy endpoints, application routing rules, transport modes (TCP / TLS), and bypass lists from the identical JSON configuration file located next to the executable.

Interactive Console

Direct foreground execution for live debugging, quick testing, or portable scenarios. Must be launched from an elevated Administrator console by default to initialize packet filtering (or with --allow-not-admin when driver ACLs permit standard users).

# Run interactively (Administrator) ProxiFyre.exe Reads local app-config.json and prints live logs to stdout. Press Ctrl+C to terminate.

Windows Service

Unattended background service (ProxiFyreService) running automatically across system boots without requiring an active desktop logon session.

# Install and manage service ProxiFyre.exe install ProxiFyre.exe start ProxiFyre.exe stop ProxiFyre.exe uninstall

GUI + Service

Desktop management frontend (ProxiFyreUI.exe) for editing configuration and controlling ProxiFyreService. The service handles packet redirection.

1. Launch GUI: Run ProxiFyreUI.exe with administrator elevation.
2. Configure Rules: Add SOCKS5 proxies, target processes, and LAN bypass.
3. Validate: Click Validate to verify rule syntax and proxy connectivity.
4. Apply: Click Apply & Restart to reload the background service.
Explore Source Code & Documentation on GitHub →