/wireguard-socks-proxy

Primary LanguageShellMIT LicenseMIT

wireguard-socks-proxy

Expose WireGuard as a SOCKS5 proxy in a Docker container.

This is a based on the docker-wireguard-socks-proxy, now using Debian and adapting several points.

Please note that this assumes an existing Wireguard configuration working.

How to run

You can run it with the following command:

docker run -d\
    --name=wireguard-socks-proxy \
    --cap-add=NET_ADMIN \
    --publish 127.0.0.1:1080:1080 \
    --sysctl net.ipv4.conf.all.src_valid_mark=1 \
    --privileged \
    --volume "/etc/wireguard:/etc/wireguard/:ro" \
    ghcr.io/tunguskacc/wireguard-socks-proxy

Or use directly the wg-tunnel script:

bash wg-tunnel

Then connect to SOCKS proxy through through 127.0.0.1:1080 (or local.docker:1080 for Mac / docker-machine / etc.). For example:

curl --proxy socks5h://127.0.0.1:1080 ipinfo.io

FAQ

Why you need to run with privileged?

Wireguard changed since the original image was published, and now it requires sysctl permissions. See here for more context.