With the team we are building a network management tool: switch upgrades, data collection/analytics, etc. With the write operations on production switches we've been requested to add an AAA flow so we have only 1 entry point for all microservices. For that reason we decided to add a proxy in the first place, so each request goes through the proxy, authenticates with External Authentication (the first A), then proceeds to the next step etc.

First we thought about squid/envoy, but these proxies were declined by our devops as planned for the future. For sure we found a workaround, but then I thought why there are almost no proxies with UI/ACLs/limits/quotas/speed limits etc.

So I decided to create my own solution that works out of the box with 1 simple command:

  docker run -d --name proxium -p 80:80 -p 8080:8080 -v proxium:/var/lib/proxium \
    -e SUPERUSER_CREATE=true -e SUPERUSER_EMAIL=admin@example.com \
    -e SUPERUSER_PASSWORD=change-me ikoldakov/proxium

Then open http://localhost, log in, create a proxy account and use it: curl -x http://username:password@localhost:8080 https://ifconfig.me curl -x socks5h://username:password@localhost:8080 https://ifconfig.me

Also, proxium supports https for the admin panel with self-signed certificates, let's encrypt certificates or your own uploaded ones. The proxy itself supports TLS too (self-signed, uploaded or imported from certbot).

External auth is not supported yet, but it's next in the roadmap: an HTTP hook in nginx auth_request style first, then JWTs from your identity provider. SSO over OIDC for the admin panel is planned as well.

I used AI for some parts of the code

Feedback is welcome!

Scientists Discover a Particle Explains the Origin of Reality

Swiss Government Emergency Preparation Calculator

Monte-Carlo Simulations

I built Giverny – a native terminal for Cluade Code and Codex

Zirql: Extracting a Shared Query Language

Four Years with Decker

What Happened to Epyx

Apple broke an essential presentation feature of iPads

Show HN: Chat Roulette for Vibecoding

Tracing Sanctioned Authors' Words from Wikipedia into LLM Output [pdf]

Learnings from tracking GPU and token prices for fun

Filo, run many Claude Code and Codex agents in one chat

Elon Musk becomes biggest donor of US midterms cycle with $366M spent

Show HN: Armite - a local Azure emulator with a real identity plane and RBAC

XScreenSaver's Agents.md

Show HN: Snitch – my Mac talked to 347 servers in one idle hour, so I built this

Show HN: Proxium – Self-hosted HTTP/SOCKS5 proxy with a web admin UI

Pennsylvania issues alert on congenital measles–something unseen for decades

The EU VAT rules my invoicing code got wrong, in the order I found them

DJ Vibe Cat, the AI Agent Orchestrator

Retro tech meets modern AI: Inside an Amazon developer's working computer museum

Show HN: Synthetic clickstream data for recommender cold-start

Does intelligence need a hard cap?

UK to deploy jets to defend Saudi Arabia from Houthi attacks

Show HN: Cliqqe – Meet 4 new people over a video call every week

Show HN: Faro – an unofficial Signal client for the terminal

Tildes: The Shared Unix Computers

What Everyone Is Missing About Reindustrialization [video]

How to Track and Cut Your Cursor Token Costs with ZizkaDB and MCP

AI firm Elice plunges 32% in market debut as investors dump data centre stocks

Show HN: Git-chain – Simplify branch dependency management in Git

Comments