LuciSocks is performant SOCKS5 server that can also bind on a Tailnet IP. Tested on Windows 11.26200 and macOS 26.5.1 (25F80)
The tool can listen on multiple interfaces, as specified in the hardcoded configuration. In the following example, LuciSocks is configured to:
- Listen on
10.10.11.10:1338and to enforce username/password authentication. In this case,credsis the SHA-256 hash of the concatenation of the username and password. - Listen on
[::1]:1330, but without any authentication. - The
Tailnetentry tells configures LuciSocks to bind port2001on the Tailnet IP address received after registering with the specified auth key. You can also supply a custom control server URL
const CONFIG: &[Entry] = &[
Entry::Os {
addr: "10.10.11.10:1338",
creds: Some([
0x05, 0xD4, 0x96, 0x92, 0xB7, 0x55, 0xF9, 0x9C, 0x45, 0x04, 0xB5, 0x10, 0x41, 0x8E,
0xFE, 0xEE, 0xEB, 0xFD, 0x46, 0x68, 0x92, 0x54, 0x0F, 0x27, 0xAC, 0xF9, 0xA3, 0x1A,
0x32, 0x6D, 0x65, 0x04,
]),
},
Entry::Os {
addr: "[::1]:1330",
creds: None,
},
Entry::Tailnet {
auth_key: "ts-auth-key-...",
port: 2001,
creds: None,
server_url: None,
},
];