Ombrac

[![docs][docs-badge]][docs-url] [![crates][crates-badge]][crates-url] [![Build Status][ci-badge]][ci-url] [![Build Status][release-badge]][release-url] [![Apache 2.0 Licensed][license-badge]][license-url]

What is ombrac?

Ombrac is a secure, high-performance TCP/UDP-over-QUIC tunnel written in Rust.

ombrac architecture

The client sends TCP or UDP traffic to ombrac-client. ombrac-client encapsulates the traffic into an encrypted QUIC tunnel and sends it to ombrac-server. ombrac-server forwards the traffic to the target.

Responses travel back through the same tunnel, making the connection full-duplex.

Features

TLS 1.3 encryption with optional mutual TLS — secure by default
BBR congestion control, stream multiplexing, 0-RTT fast reconnect
SOCKS5, HTTP/HTTPS proxy, and TUN device endpoints
Full UDP tunneling with fragment reassembly
Automatic reconnect, configurable idle timeouts, SIGTERM-aware shutdown
C FFI interface for iOS/Android embedding

Installation

# Homebrew
brew tap ombrac/tap && brew install ombrac
Cargo
cargo install ombrac-client ombrac-server --features binary

Pre-compiled binaries are available on the Releases page.

Example

Server

ombrac-server \
  --listen "[::]:443" \
  --secret "your-secret" \
  --tls-cert fullchain.pem \
  --tls-key privkey.pem

Client

ombrac-client \
  --server "your-server:443" \
  --secret "your-secret" \
  --socks "127.0.0.1:1080"

Documentation

License

Apache-2.0

[docs-badge]: https://docs.rs/ombrac/badge.svg [docs-url]: https://docs.rs/ombrac [crates-badge]: https://img.shields.io/badge/crates.io-ombrac-orange [crates-url]: https://crates.io/crates/ombrac [license-badge]: https://img.shields.io/badge/license-apache-blue.svg [license-url]: https://github.com/ombrac/ombrac/blob/main/LICENSE [ci-badge]: https://github.com/ombrac/ombrac/workflows/CI/badge.svg [ci-url]: https://github.com/ombrac/ombrac/actions/workflows/ci.yml?query=branch%3Amain [release-badge]: https://github.com/ombrac/ombrac/workflows/Release/badge.svg [release-url]: https://github.com/ombrac/ombrac/actions/workflows/release.yml?query=branch%3Amain

🔗 More in this category