Skip to main content

tls-proxy

Lightweight TLS termination proxy with configurable cipher suites and mutual TLS support.

Status: ActiveRepository: github.com/d3f4lt0/tls-proxy
01

Purpose

TLS termination is usually handled by heavy infrastructure components. tls-proxy is a minimal alternative that does one thing: terminate TLS with explicit control over cipher suites, certificate validation, and mutual authentication.

It is intended for development environments, internal services, and scenarios where a full ingress controller is overkill.

02

Tech Stack

Language

Go

Protocols

TLS 1.2TLS 1.3mTLS

Focus

PerformanceSecurityMinimalism
03

Project Timeline

Project Started2026-06-15completed

Initial concept and requirements defined.

First Prototype2026-06-28completed

Basic TLS termination with default cipher suites.

Architecture Rewrite2026-07-05completed

Refactored for explicit cipher suite control and mTLS support.

Public Release2026-07-25completed

Repository made public with documentation and examples.

Current Status2026-07-27active

Active development. Core complete, testing in progress.

Future Milestonespending

HTTP/3 support, dynamic reloading, metrics hooks.

04

Current Progress

Coreactive
Cipher Configurationactive
mTLSactive
Testingpending
05

GitHub

Repository metadata placeholders for future API integration.

Repository
Started

2026-06-04

Last Activity

2026-07-18

Status

Research

Visibility

public

Repository

github.com/d3f4lt0/tls-proxy

Documentation

README

Primary Language

Go

Lightweight TLS termination proxy with configurable cipher suites and mutual TLS support.

06

Future Ideas

HTTP/3 support
Dynamic certificate reloading
Metrics and observability hooks
Plugin system for custom handlers
07

Notes

Built for internal service mesh experimentation.
Designed to run as a sidecar with minimal footprint.
Configuration via environment variables or single YAML file.