Ombrac

A secure, high-performance TCP/UDP-over-QUIC tunnel written in Rust.

Highlights

• TLS 1.3 encryption with optional mutual TLS — secure by default
• BBR congestion control, stream multiplexing, 0-RTT fast reconnect
• SOCKS5, HTTP/HTTPS proxy, and TUN device endpoints
• Full UDP tunneling with fragment reassembly
• Automatic reconnect, configurable idle timeouts, SIGTERM-aware shutdown
• C FFI interface for iOS/Android embedding

Installation

# Homebrew
brew tap ombrac/tap && brew install ombrac

# Cargo
cargo install ombrac-client ombrac-server --features binary

Pre-compiled binaries are available on the Releases page.

Quick Start

Server

ombrac-server \
  --listen "[::]:443" \
  --secret "your-secret" \
  --tls-cert fullchain.pem \
  --tls-key privkey.pem

Client

ombrac-client \
  --server "your-server:443" \
  --secret "your-secret" \
  --socks "127.0.0.1:1080"

Documentation

• Configuration Reference
• CLI Reference

License

Apache-2.0