A Go network platform and proxy core supporting protocols such as VLESS, VMess, Trojan, Shadowsocks, WireGuard, and REALITY.
42.7K+165 this week6.1KGoMPL-2.0Well maintainedUpdated 18 hours ago
bytedance/g3
Enterprise-oriented generic proxy suite in Rust, centered on the g3proxy forward proxy, now in maintenance mode.
- Stars
- 894
- Forks
- 80
- Open issues
- 22
- Last commit
- 3 days ago
What is it?
G3 is a set of network proxy and related tools written in Rust for enterprise use. Its main component, g3proxy, works as a forward proxy supporting HTTP/1 and SOCKS5, with SNI proxying and TCP TPROXY, and can also run as a TCP stream proxy or basic HTTP reverse proxy.
g3proxy covers traffic handling features such as proxy chaining with dynamic upstream selection, configurable egress routing, TLS MITM interception with decrypted traffic dump, and ICAP adaptation for integrating with third-party security products. It also provides per-user authentication, ACL and rate limit rules, and monitoring metrics at multiple levels.
The suite includes supporting tools: g3statsd (a StatsD-compatible aggregator), g3bench (protocol benchmarking for HTTP, DNS, TLS and more), g3mkcert (certificate generation), g3fcgen (fake certificate generation for g3proxy), g3iploc (IP location lookup) and g3keymess (a Cloudflare keyless server implementation). The project is in maintenance mode, and its maintainers point users to VEY for new development.
Key features
- 01HTTP/1 and SOCKS5 forward proxy with SNI proxy and TPROXY support
- 02Proxy chaining with dynamic upstream selection and custom egress routing
- 03TLS MITM interception with decrypted traffic dump
- 04ICAP adaptation for HTTP, IMAP and SMTP traffic
- 05Per-user authentication, ACL and rate limit rules
- 06Multi-level monitoring metrics and graceful reload
Use cases
- Running an enterprise forward proxy with user authentication and access control
- Inserting a third-party security scanner into proxy traffic via ICAP
- Benchmarking HTTP, DNS or TLS server performance with g3bench
Quick start
- 1
Get pre-built packages from the Cloudsmith repository
- 2
Or build and package it yourself following the build guide
- 3
Read the g3proxy user guide to configure it
Things to know
- The project is in maintenance mode, and active development has moved to the VEY project.
- Only Linux is fully supported; other platforms compile but get less support.
- The README gives no single install command, so setup means packages or building from source.
In collections
Topics
FAQ
- What is g3?
- Enterprise-oriented generic proxy suite in Rust, centered on the g3proxy forward proxy, now in maintenance mode. G3 is a set of network proxy and related tools written in Rust for enterprise use. Its main component, g3proxy, works as a forward proxy supporting HTTP/1 and SOCKS5, with SNI proxying and TCP TPROXY, and can also run as a TCP stream proxy or basic HTTP reverse proxy.
- Is g3 free to use? What license does it have?
- g3 is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
- Is g3 still maintained?
- Actively maintained. The last commit to g3 was on Nov 5, 2026.
- What can I use g3 for?
- Running an enterprise forward proxy with user authentication and access control Inserting a third-party security scanner into proxy traffic via ICAP Benchmarking HTTP, DNS or TLS server performance with g3bench
- How do I install g3?
- Get pre-built packages from the Cloudsmith repository Or build and package it yourself following the build guide Read the g3proxy user guide to configure it
- Where can I get g3?
- The source code and installation instructions are on GitHub: https://github.com/bytedance/g3
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
An interactive, TLS-capable intercepting HTTP proxy with console, command-line and web interfaces for inspecting HTTP/1, HTTP/2 and WebSocket traffic.
46.7K+187 this week4.9KPythonMITUpdated 3 days ago
A Go-based proxy built on a customized QUIC protocol, designed to work over lossy networks and disguise traffic as HTTP/3.
22.9K+57 this week2.3KGoMITWell maintainedUpdated 12 days ago
A DNS tunneling VPN that carries TCP traffic inside DNS queries and responses to get around censorship and unstable networks.
7.3K+14 this week755GoMITUpdated 5 days ago
Cross-platform client that forces TCP and UDP traffic from chosen applications through SOCKS5 or HTTP proxies, a Proxifier alternative for Windows, macOS and Linux.
7K+82 this week438CMITWell maintainedUpdated 2 days ago