glider

glider is a forward proxy with multiple protocols support, and also a dns forwarding server with ipset management features(like dnsmasq).

we can set up local listeners as proxy servers, and forward requests to internet via forwarders.

                |Forwarder ----------------->|
   Listener --> |                            | Internet
                |Forwarder --> Forwarder->...|

Features

Listen (local proxy server):

• Socks5 proxy(tcp&udp)
• Http proxy(tcp)
• SS proxy(tcp&udp)
• Linux transparent proxy(iptables redirect)
• TCP tunnel
• UDP tunnel
• UDP over TCP tunnel
• TLS, use it together with above proxy protocols(tcp)
• Unix domain socket, use it together with above proxy protocols(tcp)
• KCP protocol, use it together with above proxy protocols(tcp)

Forward (local proxy client/upstream proxy server):

• Socks5 proxy(tcp&udp)
• Http proxy(tcp)
• SS proxy(tcp&udp&uot)
• SSR proxy(tcp)
• VMess proxy(tcp)
• Trojan proxy(tcp)
• TLS, use it together with above proxy protocols(tcp)
• Websocket, use it together with above proxy protocols(tcp)
• Unix domain socket, use it together with above proxy protocols(tcp)
• KCP protocol, use it together with above proxy protocols(tcp)
• Simple-Obfs, use it together with above proxy protocols(tcp)

DNS Forwarding Server (udp2tcp):

• DNS Over Proxy
• Listen on UDP and forward dns requests to remote dns server in TCP via forwarders
• Specify different upstream dns server based on destinations(in rule file)
• Tunnel mode: forward to a fixed upstream dns server
• Add resolved IPs to proxy rules
• Add resolved IPs to ipset
• DNS cache
• Custom dns record

IPSet Management (Linux kernel version >= 2.6.32):

• Add ip/cidrs from rule files on startup
• Add resolved ips for domains from rule files by dns forwarding server

General:

• Http and socks5 on the same port
• Forwarder chain
• RR/HA/LHA/DH strategy for multiple forwarders
• Periodical proxy checking
• Rule proxy based on destinations: Config Examples
• Send requests from specific ip/interface

TODO:

• IPv6 support in ipset manager
• Transparent UDP proxy (iptables tproxy)
• Performance tuning
• TUN/TAP device support
• SSH tunnel support (maybe)

Install

Binary:

• https://github.com/nadoo/glider/releases

Go Get (requires Go 1.14+ ):

go get -u github.com/nadoo/glider

ArchLinux:

sudo pacman -S glider

Run

help:

glider -h

run:

glider -verbose -listen :8443 -forward SCHEME://HOST:PORT

glider -config CONFIGPATH

glider -config CONFIGPATH -listen :8080 -verbose

Config

• ConfigFile
  • glider.conf.example
  • office.rule.example
• Examples
  • transparent proxy with dnsmasq
  • transparent proxy without dnsmasq

Proxy & Protocol Chain

In glider, you can easily chain several proxy servers or protocols together, e.g:

• Chain proxy servers:

forward=http://1.1.1.1:80,socks5://2.2.2.2:1080,ss://method:pass@3.3.3.3:8443@

• Chain protocols: https proxy (http over tls)

forward=tls://1.1.1.1:443,http://

• Chain protocols: vmess over ws over tls

forward=tls://1.1.1.1:443,ws://,vmess://5a146038-0b56-4e95-b1dc-5c6f5a32cd98@?alterID=2

• Chain protocols and servers:

forward=socks5://1.1.1.1:1080,tls://2.2.2.2:443,ws://,vmess://5a146038-0b56-4e95-b1dc-5c6f5a32cd98@?alterID=2

• Chain protocols in listener: https proxy server

listen=tls://:443?cert=crtFilePath&key=keyFilePath,http://

Service

• systemd: https://github.com/nadoo/glider/blob/master/systemd/

Links

• conflag: command line and config file parse support
• ArchLinux: a great linux distribution with glider pre-built package