3proxy

3proxy is self-hosted proxy software for controlling traffic between internal and external networks. It suits administrators who want multiple proxy protocols and configurable traffic controls without a software fee. Its breadth is useful, but secure deployment depends on careful access restrictions.

Overview

3proxy combines proxying with network services such as port mapping and DNS caching. Its published network coverage spans HTTP, HTTPS, SOCKS4, SOCKS4.5, SOCKS5, FTP, POP3, SMTP, IMAP, DNS, TCP and UDP; its supported-protocol list names HTTP, HTTPS, SOCKS4, SOCKS4.5, SOCKS5, FTP, TCP and UDP. That distinction matters when matching a particular service to a deployment.

For a wider comparison, see Forward Proxy Software and Proxy Software.

Key features

HTTP and HTTPS proxying, three SOCKS versions and FTP over HTTP cover common relay needs. POP3 proxying, TCP and UDP port mapping, and a caching DNS proxy broaden its role beyond a simple web proxy. This range is valuable for operators consolidating several network functions, but it also means choosing and configuring the right services is part of the job.

Access controls can be combined with bandwidth and traffic-amount limits, proxy chaining and log rotation. Logging can write to files, Unix syslog or an ODBC database, with a configurable format. These are practical controls for managing traffic and retaining records, though they call for an administrator prepared to configure a server rather than a turnkey hosted service.

When built with OpenSSL, 3proxy includes HTTPS proxy connections, upstream TLS connections with certificate authentication, and mutual TLS. Those TLS capabilities are conditional on the build. Optional build support also covers PCRE2, PAM and ODBC, so integrations depend on the components included in a given build.

Security guidance recommends restricting access with ACLs and cautions that the documented strong authentication method uses cleartext authentication. That warning should weigh heavily in deployment decisions: ACL restrictions are recommended, and the described authentication approach may not suit environments that require stronger protection for credentials.

Release binaries are published with SHA256 checksums, an OpenPGP signature and GitHub build provenance attestation; Docker images are signed and attested. Docker images are available, and Windows installation as a system service is described. Commercial support or licensing questions are directed to an email contact.

Pricing

The 3proxy plan costs nothing and is freeware and open source. It is the fit for users able to host and manage the software themselves who want its network services without a software charge. There is no free trial; the plan is free, not a paid tier with a trial period.

Platforms

3proxy supports Linux, macOS and Windows, as well as self-hosted deployment. The documented Docker option gives teams another self-managed deployment route; Windows users can install it as a system service.

Who it's for

Choose 3proxy if you need varied proxy protocols, traffic controls and flexible logging in software you can operate yourself. It is less suitable if you want a managed gateway or cannot accommodate its ACL guidance and cleartext authentication caveat.

Pros and cons

• Pros: Broad proxy and network-service coverage supports more than ordinary HTTP relaying.
• Pros: Bandwidth and traffic limits, chaining and several logging destinations give administrators useful control over traffic and records.
• Pros: Freeware and open source, with Linux, macOS, Windows and self-hosted support, avoids a software fee across the stated platforms.
• Cons: TLS features require an OpenSSL build, so they are not inherent to every build.
• Cons: Security guidance calls for ACL restrictions and notes that documented strong authentication uses cleartext, a significant concern for credential-sensitive deployments.
• Cons: Its configurable, self-hosted nature places deployment and configuration responsibility on the operator.

Alternatives

Cloudflare Gateway is a better fit for readers seeking a freemium option across mobile, desktop and web platforms: its free plan costs nothing, billed forever, for 50 users with up to 24 hours of standard log retention.

mitmproxy is another free, open-source proxy option, described as an interactive HTTPS proxy, for readers whose priority is that focus.

Privoxy offers free software that can be used, copied, modified or distributed, with no registration and no warranty; choose it if those terms suit your needs.

Squid is free to download, use and modify, with self-hosted proxy software and possible third-party commercial support.

Tinyproxy is a free option distributed under GNU GPL version 2 or above, for readers wanting Linux, macOS or self-hosted support.

Skyhigh Private Access is a paid alternative for readers considering software available on Android, iOS, macOS, web and Windows.

WinGate is a Windows freemium alternative; its Standard plan for 6 concurrent users costs $109.95 a month, with license size based on concurrent connections.

SafeSquid Secure Web Gateway is a paid Linux, self-hosted, web and Windows option with an annual subscription that stops working if not renewed.

Verdict

3proxy is a strong choice for technically capable operators who want broad proxy and network-service coverage, traffic controls and logging without a software fee. Its main reason to choose it is that breadth under self-hosted control; its main reason to look elsewhere is the cleartext authentication caveat and the care required to restrict access.