{"slug": "wireproxy", "name": "wireproxy", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 4, "commenters": 4, "warners": 0, "score": 3.699, "rising": 0.02, "first": "2025-12-19", "latest": "2026-10-31", "why": "This way you can assign any Wireguard-capable VPN for specific containers. It's extremely useful.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 4, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 1, 0, 0, 0, 0, 0, 0, 2, 0, 0, 1], "listed": true, "loved": [], "caveat": "", "short_quote": "This way you can assign any Wireguard-capable VPN for specific containers. It's extremely useful.", "kind": "", "icon": false, "domain": null, "github_repo": "github.com/windtf/wireproxy", "official_url": "https://github.com/windtf/wireproxy", "pricing": "", "aliases": ["wireproxy"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 805034400, "item_id": 50314650, "url": "https://news.ycombinator.com/item?id=50314650", "by": "dns_snek", "date": "2026-10-31", "version": null, "stance": "recommend", "quote": "You can run wireguard in userspace with something like wireproxy", "excerpt": "> where you can basically just scope VPNs to a subprocess rather than having to use some system wide network filter with split tunneling or whatever. Wireguard has huge usability issues due to that. You can run wireguard in userspace with something like wireproxy which connects to a wireguard peer and acts as a proxy for your subprocess. [1] https://github.com/windtf/wireproxy", "context": "", "use_case": "WireGuard proxy for subprocesses", "switched_from": "", "story": "Tailscale SSH: Investigation and remediation update"}, {"id": 784814672, "item_id": 49050917, "url": "https://news.ycombinator.com/item?id=49050917", "by": "QGQBGdeZREunxLe", "date": "2026-07-25", "version": null, "stance": "recommend", "quote": "Managed to get up and running quickly with this", "excerpt": "Managed to get up and running quickly with this and https://github.com/pia-foss/manual-connections for Private Internet Access. WGConfig = \"/etc/wireguard/pia.conf\" # Socks5 creates a socks5 proxy on your LAN, and all traffic would be routed via wireguard. [Socks5] BindAddress = 127.0.0.1:25344", "context": "", "use_case": "SOCKS proxy per container", "switched_from": "", "story": "Firefox Containers Preview"}, {"id": 784740416, "item_id": 49046276, "url": "https://news.ycombinator.com/item?id=49046276", "by": "nbaksalyar", "date": "2026-07-25", "version": null, "stance": "recommend", "quote": "This way you can assign any Wireguard-capable VPN for specific containers. It's extremely useful.", "excerpt": "> the options to use socks proxies I pair it with wireproxy [0]. This way you can assign any Wireguard-capable VPN for specific containers. It's extremely useful. [0] https://github.com/windtf/wireproxy", "context": "", "use_case": "Per-container VPN routing", "switched_from": "", "story": "Firefox Containers Preview"}, {"id": 741215936, "item_id": 46325996, "url": "https://news.ycombinator.com/item?id=46325996", "by": "turblety", "date": "2025-12-19", "version": null, "stance": "recommend", "quote": "There is wireproxy [1] though that might do what you want?", "excerpt": "Thanks chjj. Yeah it's always LD_PRELOAD. There is wireproxy [1] though that might do what you want? 1. https://github.com/whyvl/wireproxy", "context": "", "use_case": "WireGuard SOCKS proxy", "switched_from": "", "story": "GotaTun \u2013 Mullvad's WireGuard Implementation in Rust"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["wireguard proxy for subprocesses", "socks proxy per container", "per-container vpn routing", "wireguard socks proxy"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=48995409", "title": "Firefox Containers Preview", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=50264857", "title": "Tailscale SSH: Investigation and remediation update", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46324543", "title": "GotaTun \u2013 Mullvad's WireGuard Implementation in Rust", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"recommend": 1}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {"recommend": 2}, "2026-08": {}, "2026-09": {}, "2026-10": {"recommend": 1}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 805034400, "item_id": 50314650, "url": "https://news.ycombinator.com/item?id=50314650", "by": "dns_snek", "date": "2026-10-31", "version": null, "stance": "recommend", "quote": "You can run wireguard in userspace with something like wireproxy", "excerpt": "> where you can basically just scope VPNs to a subprocess rather than having to use some system wide network filter with split tunneling or whatever. Wireguard has huge usability issues due to that. You can run wireguard in userspace with something like wireproxy which connects to a wireguard peer and acts as a proxy for your subprocess. [1] https://github.com/windtf/wireproxy", "context": "", "use_case": "WireGuard proxy for subprocesses", "switched_from": "", "story": "Tailscale SSH: Investigation and remediation update"}, {"id": 784814672, "item_id": 49050917, "url": "https://news.ycombinator.com/item?id=49050917", "by": "QGQBGdeZREunxLe", "date": "2026-07-25", "version": null, "stance": "recommend", "quote": "Managed to get up and running quickly with this", "excerpt": "Managed to get up and running quickly with this and https://github.com/pia-foss/manual-connections for Private Internet Access. WGConfig = \"/etc/wireguard/pia.conf\" # Socks5 creates a socks5 proxy on your LAN, and all traffic would be routed via wireguard. [Socks5] BindAddress = 127.0.0.1:25344", "context": "", "use_case": "SOCKS proxy per container", "switched_from": "", "story": "Firefox Containers Preview"}, {"id": 784740416, "item_id": 49046276, "url": "https://news.ycombinator.com/item?id=49046276", "by": "nbaksalyar", "date": "2026-07-25", "version": null, "stance": "recommend", "quote": "This way you can assign any Wireguard-capable VPN for specific containers. It's extremely useful.", "excerpt": "> the options to use socks proxies I pair it with wireproxy [0]. This way you can assign any Wireguard-capable VPN for specific containers. It's extremely useful. [0] https://github.com/windtf/wireproxy", "context": "", "use_case": "Per-container VPN routing", "switched_from": "", "story": "Firefox Containers Preview"}, {"id": 741215936, "item_id": 46325996, "url": "https://news.ycombinator.com/item?id=46325996", "by": "turblety", "date": "2025-12-19", "version": null, "stance": "recommend", "quote": "There is wireproxy [1] though that might do what you want?", "excerpt": "Thanks chjj. Yeah it's always LD_PRELOAD. There is wireproxy [1] though that might do what you want? 1. https://github.com/whyvl/wireproxy", "context": "", "use_case": "WireGuard SOCKS proxy", "switched_from": "", "story": "GotaTun \u2013 Mullvad's WireGuard Implementation in Rust"}]}