Tinyproxy
Tinyproxy is a small, efficient HTTP/SSL proxy daemon for small networks. It buffers high-speed responses and relays to slower clients. Supports transparent, reverse, upstream proxying and filtering.
Smart Download
Visit Project Homepage
No installer available yet — head to the source repository
Tiny HTTP/SSL proxy with connection buffering for small networks.
Core Features
- Connection buffering to speed up slow clients
- Transparent proxy support via firewall redirection
- Reverse proxy and upstream proxy chaining
- Domain and URL filtering
- Low memory and CPU footprint, ideal for embedded systems
What It Can't Do
- •Default listens only on 127.0.0.1; modify the Listen directive in config to serve other devices. No HTTPS content inspection (CONNECT tunnel only). Log files can grow, so monitor disk space.
Use Cases
- Small office/home network sharing with HTTP/SSL only
- Router or embedded device proxy
- Transparent proxy without manual client configuration
Detailed Introduction
Tinyproxy is a lightweight HTTP/SSL proxy daemon designed for small network environments where a larger proxy would be too resource-intensive or a security risk. Its key feature is connection buffering: it buffers high-speed responses from servers and relays them to clients at the highest speed the client can accept, greatly reducing perceived internet sluggishness. Tinyproxy supports transparent proxy (via firewall redirection), reverse proxy, upstream proxy chaining, and domain/URL filtering. It compiles and runs on Linux, BSD, and other Unix-like systems with minimal resource usage, making it ideal for embedded devices or routers. Configuration is straightforward via a plain-text config file. Tinyproxy is released under the GNU General Public License.
Troubleshooting & FAQ (2)
TroubleshootingHow to rotate Tinyproxy log files?
Tinyproxy does not include built-in log rotation. Use external tools like logrotate or syslog. When rotation completes, send SIGHUP to the Tinyproxy process to make it reopen its log file. Example logrotate config: postrotate script that runs kill -HUP $(cat /var/run/tinyproxy.pid).
TroubleshootingAre CVE-2026-3945 and CVE-2026-31842 real vulnerabilities in Tinyproxy 1.11.3, and how do I fix them?
Yes, both CVEs are real, but the Tinyproxy maintainer assesses them as low severity (roughly 2/10). Exploitation generally requires luring a proxy user into connecting to a malicious upstream server; CVE-2026-3945 may result in denial of service, while CVE-2026-31842 also depends on additional bugs in other backends. Stock Tinyproxy 1.11.3 does not include the fixes. They are fixed in the project's HEAD: CVE-2026-3945 by commit bb7edc4778041b3bc8ad7fca448b67d98039cc7d (issue #602), and CVE-2026-31842 by commit 879bf844abffa0bf5fae6aff0c73179024dd9f98 (issue #604). Upgrade to a Tinyproxy release containing those commits or build from current HEAD. To verify a checkout contains both fixes, run: git merge-base --is-ancestor bb7edc4778041b3bc8ad7fca448b67d98039cc7d HEAD && echo CVE-2026-3945-patched and git merge-base --is-ancestor 879bf844abffa0bf5fae6aff0c73179024dd9f98 HEAD && echo CVE-2026-31842-patched. As a temporary mitigation, restrict proxy access to trusted users and prevent connections to untrusted or malicious upstream servers.
Tags
Getting Started
Download installer
Click the button above to download the installer for your system
Install the software
Double-click the downloaded installer and follow the prompts
Step 1: Download source or binary from GitHub Releases
Step 2: Run ./autogen.sh (if git checkout), then ./configure && make && make install
Step 3: Edit /etc/tinyproxy/tinyproxy.conf to set port and allowed IPs
- Step 1: Download source or binary from GitHub Releases
- Step 2: Run ./autogen.sh (if git checkout), then ./configure && make && make install
- Step 3: Edit /etc/tinyproxy/tinyproxy.conf to set port and allowed IPs
Checksum not available
This project has not published a SHA-256 checksum on its GitHub Release page
SHA256 Checksum
No checksum available
Download directly from GitHub Releases and verify file integrity yourself
All SHA-256 checksums on this platform are extracted from the project's official GitHub Release page, without any modification. You can independently verify them on the GitHub Releases page.
Open Source Transparency
View GitHub SourceUninstall Info
Run 'make uninstall' to remove files, or use package manager (e.g., apt remove tinyproxy). Manual cleanup of config may be needed.
No Extra Dependencies
Ready to use after download. No additional runtime required.
Having issues? Check the FAQ below
2 FAQs
Similar Projects
rustdesk
An open-source remote desktop tool built in Rust, designed for self-hosting. Compared to TeamViewer, it offers full data control and zero-config out-of-the-box, making it a privacy-focused alternative.
Immich
High performance self-hosted photo and video management solution with automatic backup, AI search, facial recognition, and multi-user support.
syncthing
A continuous file synchronization program that syncs files between devices securely and automatically, with no central server.