#proxy #transport #versatile #framework #suitable #secure #cases

app eycorsican/leaf-bin

A versatile and efficient proxy framework with nice features suitable for various use cases

30 releases

0.10.9 Jan 22, 2024
0.10.7 Sep 27, 2023
0.9.3 Jun 17, 2023
0.8.2 Mar 31, 2023
0.2.7 Dec 18, 2020

#1 in #versatile

2,228 stars & 56 watchers

106 lines

releases ci


A versatile and efficient proxy framework with nice features suitable for various use cases.


There are 2 transports for traffic multiplexing:

  • AMux: A multiplexd transport based on reliable streams suitable for TCP-based protocols and transports
  • QUIC: A UDP-based, multiplexed and secure transport

The benefit of amux is that we can reuse connections to reduce handshake overhead, it's not designed to be memory efficient because it focus only on reusing connections and not reducing the number of connections. While quic can reduce both handshake overhead and memory usage without suffering the head-of-line blocking issue.

Transparent Proxying

There's the TUN inbound for this purpose, which is also of fundamental importance for VPN-like proxying use cases such as VPN apps on iOS and Android.

High Availability

Outbounds such as failover, tryall, retry, random and their combinations are able to flexibly deliver reqeusts to other outbounds based on their own metrics to achieve high availability or load balancing behaviors.

Request Routing

Rule-based request routing is also supported. Requests can be routed to different outbounds based on domain, IP, GEOIP and port rules.

Getting Started

dns-server =
socks-interface =
socks-port = 1080

Direct = direct

More configuration examples can be found here. If you want more flexible control on the config options, the JSON format should be used, up-to-date examples for the JSON format could be found in the tests, both client-side and server-side config examples are presented there.

TUN Mode and Gateway Mode

TUN Mode

This syntax (tun = auto) is supported on macOS and Linux.

dns-server =
tun = auto

Direct = direct

Gateway Mode

Running in gateway mode requires a configuration with TUN mode enabled. Gateway mode can be enabled by an environment variable.

GATEWAY_MODE=true leaf -c config.conf


  • Maple: A lightweight Universal Windows proxy app based on leaf

iOS & Android


Install Rust: https://www.rust-lang.org/tools/install

Install GCC or Clang.

Clone & Build:

git clone --recursive https://github.com/eycorsican/leaf.git
cd leaf
cargo build -p leaf-bin


./target/debug/leaf --help


This project is licensed under the Apache License 2.0.


~71K SLoC