What is ProxyBridge?
ProxyBridge is an open-source proxy client that applies traffic rules to individual applications, including applications without built-in proxy settings. It operates at the system level and can send selected connections through a proxy, leave them direct or block them. Rules can target processes, destinations, ports and protocols.
The tool installs locally on Windows, macOS and Linux, with graphical and command-line interfaces. Profiles store proxy configurations and rules for reuse and import or export. The current Linux implementation uses eBPF and a privileged service, while macOS uses a system extension that requires approval.
ProxyBridge routes traffic but does not inspect or modify its contents. Security testing requires a separate interception proxy, such as InterceptSuite or Burp Suite. UDP routing requires a SOCKS5 proxy with UDP ASSOCIATE support; HTTP proxies and Tor cannot carry UDP.
ProxyBridge screenshots
Explore the interface. Open a screenshot to view it at full size.
Source: official ProxyBridge project page.
Key capabilities
- Application rules Route, allow or block traffic from selected processes without changing their proxy settings.
- Destination matching Apply rules using addresses, ports, protocols and hostnames, with platform-specific matching limitations.
- Proxy selection Configure multiple SOCKS5 or HTTP proxies and choose a proxy for each rule.
- Profiles Save, switch, import and export routing configurations for graphical or command-line use.
- Connection monitoring View live proxied connections and traffic counters on Windows and Linux.
- UDP routing Forward UDP and QUIC through SOCKS5 proxies that support UDP ASSOCIATE.
Where ProxyBridge fits
ProxyBridge fits application security testing when desktop software or games cannot be configured to use an interception proxy. It also supports selective proxy routing and application-level network blocking while leaving other connections direct.
Before deployment, administrators should verify operating-system requirements, installation privileges and upstream proxy capabilities. On Linux, container traffic and other network namespaces are not redirected, encrypted DNS prevents hostname learning, and traffic returns to direct connections if ProxyBridge stops. On macOS, disabling its DNS proxy preserves routing but stops hostname rules from matching.
Install
curl -Lo deploy.sh https://raw.githubusercontent.com/InterceptSuite/ProxyBridge/refs/heads/master/Linux/deploy.sh && sudo bash deploy.shReviews of ProxyBridge
Be the first to share your experience with ProxyBridge.
Write a review
Loading review form…
Alternatives to ProxyBridge
DefguardDefguard is a self-hosted remote access platform combining a WireGuard VPN, an OpenID Connect identity provider, connection-level MFA with FIDO2 keys and firewall rules. Open source under the AGPL, with Business and Enterprise plans.
FirezoneFirezone is a WireGuard-based remote access platform with Clients for Windows, macOS, Linux, iOS and Android, Gateways you run, identity-based policies, Device Trust and audit logs. Managed service with a free plan; Apache-2.0 and ELv2 source.
NebulaNebula is an open-source, self-hosted overlay networking tool created at Slack. Hosts authenticate each other with certificates from your own CA, find peers through lighthouses, traverse NAT and filter traffic with group-based firewall rules.