← Package directory
Available on winget

Install JA3Proxy

Customizing TLS (JA3) Fingerprints through HTTP Proxy

Install with winget
winget install --id LyleMi.JA3Proxy
Upgrade
winget upgrade --id LyleMi.JA3Proxy
Uninstall
winget uninstall --id LyleMi.JA3Proxy

About JA3Proxy

Customizing TLS (JA3) Fingerprints through HTTP Proxy

What's new in 0.6.0

Highlights - Serve HTTP, HTTPS, and SOCKS5 clients on the same listen address. SOCKS5 TLS streams use the MITM/uTLS path, while non-TLS streams are forwarded as plain TCP. - Select outbound uTLS fingerprints globally or by upstream host with the new fingerprint catalog, hot-reloadable configuration, and --tls-profile-file routes. - Monitor active and recent traffic with the optional --tui dashboard, structured log levels, and opt-in payload dumping. - Reorganize runtime code into focused internal packages and expand unit and end-to-end coverage. - Build Linux, Windows, and macOS archives for AMD64 and ARM64 with SHA-256 checksums. Stable releases also publish multi-platform GHCR images with SBOM and provenance attestations. Breaking CLI changes The runtime flags have been renamed: - -addr and -port → --listen - -cert and -key → --ca-cert and --ca-key - -client, -version, and -fingerprint → --tls-fingerprint - -fingerprint-config → --tls-fingerprint-file - -upstream-tls-config → --tls-profile-file - -upstream → --upstream-proxy - -list-fingerprints → --list-tls-fingerprints - -debug → --log-level debug; use --dump-traffic to log payload data Go 1.26.5 or newer is required when building from source. Full Changelog: https://github.com/LyleMi/ja3proxy/compare/v0.5.1...v0.6.0

Read release notes

Version history

Version Updated Notes
0.6.0 Unknown Highlights - Serve HTTP, HTTPS, and SOCKS5 clients on the same listen address. SOCKS5 TLS streams use the MITM/uTLS path, while non-TLS streams are forwarded as plain TCP. - Select outbound uTLS fingerprints globally or...
0.5.1 Unknown What's Changed Features - Added hot-reloadable TLS fingerprint configuration via -fingerprint-config. - Supports loading client and version from a JSON file. - New HTTPS CONNECT connections use the latest loaded fingerpr...
0.4 Unknown What's Changed - Added newer version of dependencies (e.g. utls) for new browsers compatibility by @antoniolch in https://github.com/LyleMi/ja3proxy/pull/17 New Contributors - @antoniolch made their first contribution in...
0.3 Unknown What's Changed - Load certificate at startup by @rosahaj in #9 - fix: reply with sni-specific certs by @rosahaj in #11 - fix: stop goroutine leaks by ensuring both goroutines exit properly by @huboh in #14 New Contributo...