Secure Proxy ManagerContainerized proxy management for homelabs and small networks

Squid proxy engine with FastAPI backend, React UI, and ICAP WAF — deployed in minutes with Docker Compose.

Traffic Filtering

Domain and IP blacklisting with CIDR and wildcard support. One-click import of popular blocklists (Spamhaus, Firehol, Pi-hole, Phishing Army). Geo-based IP blocking.

IP Whitelist

Whitelist trusted destination IPs to bypass the direct-IP block. Useful for LAN NAS, printers, and other devices accessed by IP address.

ICAP WAF

Python-based ICAP server inspects all HTTP requests for SQL injection, XSS, directory traversal, command injection, and unicode homograph attacks.

Real-time Logs

Live log streaming via WebSocket with one-time token authentication. Filter by IP, domain, or status. Search, stats, and CSV-ready table.

Security Hardening

Rate-limited authentication, SSRF protection on import URLs, CORS restriction, bcrypt password hashing, localhost-only backend API binding.

Self-hosted

Runs entirely on your hardware via Docker Compose. No cloud dependency. SQLite database. Configurable via environment variables and web UI.