chicha-ip-proxy

BLAZING FAST and SECURE TCP/UDP port proxy written in GO.

---

Downloads / Скачать

Linux _{amd64 / arm64}

amd64 · download

sudo curl -L -o /usr/local/bin/chicha-ip-proxy https://github.com/matveynator/chicha-ip-proxy/releases/latest/download/chicha-ip-proxy-linux-amd64; sudo chmod +x /usr/local/bin/chicha-ip-proxy; sudo chicha-ip-proxy

arm64 · download

sudo curl -L -o /usr/local/bin/chicha-ip-proxy https://github.com/matveynator/chicha-ip-proxy/releases/latest/download/chicha-ip-proxy-linux-arm64; sudo chmod +x /usr/local/bin/chicha-ip-proxy; sudo chicha-ip-proxy

---

macOS _{Intel / Apple Silicon}

Intel / amd64 · download

sudo mkdir -p /usr/local/bin; sudo curl -L -o /usr/local/bin/chicha-ip-proxy https://github.com/matveynator/chicha-ip-proxy/releases/latest/download/chicha-ip-proxy-darwin-amd64; sudo chmod +x /usr/local/bin/chicha-ip-proxy; sudo chicha-ip-proxy

Apple Silicon / arm64 · download

sudo mkdir -p /usr/local/bin; sudo curl -L -o /usr/local/bin/chicha-ip-proxy https://github.com/matveynator/chicha-ip-proxy/releases/latest/download/chicha-ip-proxy-darwin-arm64; sudo chmod +x /usr/local/bin/chicha-ip-proxy; sudo chicha-ip-proxy

---

Windows _{amd64 / arm64}

_{Run PowerShell as Administrator / Запустите PowerShell от администратора.}

amd64 · download

$p="$env:ProgramFiles\chicha-ip-proxy\chicha-ip-proxy.exe"; New-Item -ItemType Directory -Force -Path (Split-Path $p) | Out-Null; Invoke-WebRequest -Uri "https://github.com/matveynator/chicha-ip-proxy/releases/latest/download/chicha-ip-proxy-windows-amd64.exe" -OutFile $p; & $p

arm64 · download

$p="$env:ProgramFiles\chicha-ip-proxy\chicha-ip-proxy.exe"; New-Item -ItemType Directory -Force -Path (Split-Path $p) | Out-Null; Invoke-WebRequest -Uri "https://github.com/matveynator/chicha-ip-proxy/releases/latest/download/chicha-ip-proxy-windows-arm64.exe" -OutFile $p; & $p

---

FreeBSD _{amd64 / arm64}

amd64 · download

sudo fetch -o /usr/local/bin/chicha-ip-proxy https://github.com/matveynator/chicha-ip-proxy/releases/latest/download/chicha-ip-proxy-freebsd-amd64; sudo chmod +x /usr/local/bin/chicha-ip-proxy; sudo chicha-ip-proxy

arm64 · download

sudo fetch -o /usr/local/bin/chicha-ip-proxy https://github.com/matveynator/chicha-ip-proxy/releases/latest/download/chicha-ip-proxy-freebsd-arm64; sudo chmod +x /usr/local/bin/chicha-ip-proxy; sudo chicha-ip-proxy

---

OpenBSD _{amd64 / arm64}

amd64 · download

sudo ftp -o /usr/local/bin/chicha-ip-proxy https://github.com/matveynator/chicha-ip-proxy/releases/latest/download/chicha-ip-proxy-openbsd-amd64; sudo chmod +x /usr/local/bin/chicha-ip-proxy; sudo chicha-ip-proxy

arm64 · download

sudo ftp -o /usr/local/bin/chicha-ip-proxy https://github.com/matveynator/chicha-ip-proxy/releases/latest/download/chicha-ip-proxy-openbsd-arm64; sudo chmod +x /usr/local/bin/chicha-ip-proxy; sudo chicha-ip-proxy

---

All releases / Все релизы: github.com/matveynator/chicha-ip-proxy/releases

---

Usage / Как пользоваться

Run without arguments / Запустите без параметров:

sudo chicha-ip-proxy

The wizard asks / Мастер спросит:

target IP
remote port
local port
tcp / udp
allowed client IPs

Then it can save the proxy as an autostart service. После этого можно сохранить прокси в автозапуск.

---

Examples / Примеры

TCP

sudo chicha-ip-proxy -local=8080 -remote=203.0.113.10:80 -proto=tcp

UDP DNS

sudo chicha-ip-proxy -local=53 -remote=8.8.8.8:53 -proto=udp

IPv6 target

sudo chicha-ip-proxy -local=8443 -remote=[2001:db8::10]:443 -proto=tcp

Allow only one client IP / Разрешить только один IP

sudo chicha-ip-proxy -local=8080 -remote=203.0.113.10:80 -allow=198.51.100.7

---

Flags / Флаги

-local   local port / локальный порт
-remote  target IP[:PORT] or [IPv6]:PORT / куда пересылать
-proto   tcp or udp
-allow   allowed IP/CIDR

If -allow is not set, all clients are allowed. Если -allow не указан, разрешены все клиенты.

Common TCP/UDP Proxy Problems Solved by chicha-ip-proxy

These are the most common questions people ask on forums like Stack Overflow, Server Fault, Reddit, Habr, and Linux.org.ru.

• I just need a simple TCP proxy.
• I just need a simple UDP proxy.
• I need to proxy both TCP and UDP.
• Forward a TCP/UDP port to another server.
• Expose a service through a VPS with a public IP.
• Bypass NAT using a VPS.
• Proxy game servers (Minecraft, CS, Rust, etc.).
• Proxy VPN traffic (OpenVPN, WireGuard, etc.).
• Proxy SSH, RDP, VNC, FTP, SMTP, IMAP, and other non-HTTP protocols.
• Move a service to another server without changing the client configuration.
• Replace nginx stream for simple port forwarding.
• Avoid HAProxy for basic TCP/UDP proxying.
• Replace socat, xinetd, or rinetd with a single tool.
• Avoid writing iptables/nftables rules.
• Start a proxy with a single command.
• Run automatically after reboot.
• Restrict access by IP address.
• Manage dozens or hundreds of forwarded ports.
• Use a solution without configuration files.
• Use the same tool on Linux, Windows, macOS, FreeBSD, and OpenBSD.
• Replace several networking utilities with one lightweight application.
• Temporarily redirect traffic during migrations.
• Hide the real backend behind a relay server.
• Proxy raw TCP/UDP traffic instead of HTTP.

In short, most forum questions come down to one simple request:

“I just need to proxy a TCP or UDP port, but everyone recommends nginx, HAProxy, socat, xinetd, rinetd, iptables, WireGuard, or some other complex setup.”

chicha-ip-proxy is designed specifically for this use case: a lightweight, cross-platform TCP/UDP port proxy with no configuration files, simple setup, automatic startup, and optional IP-based access control.

---

License

Source code is available under the BSD 3-Clause License. Data and media assets are dedicated to the public domain under CC0 1.0 Universal.