# wirez

A Linux tool that redirects all TCP/UDP traffic from any program through a SOCKS5 proxy. Unlike proxychains or tsocks, which use `LD_PRELOAD` to intercept libc calls (and break on statically linked binaries), wirez uses rootless Linux containers and a userspace network stack (gVisor).

**How it works:** wirez spawns the target program in an isolated user+network namespace, creates a TUN device as the default gateway, and routes everything through a gVisor userspace TCP/IP stack connected to the SOCKS5 proxy. No library injection, no root required, works with any binary.

**Basic usage:**

```sh
# route all traffic from bash session through proxy
wirez run -F 127.0.0.1:1234 bash

# one-off command
wirez run -F 127.0.0.1:1234 -- curl example.com

# TCP through proxy, but DNS (UDP 53) goes direct
wirez run -F 127.0.0.1:1234 -L 53:1.1.1.1:53/udp -- curl example.com
```

**Load balancing:** wirez can also act as a simple SOCKS5 load balancer across multiple proxies:

```sh
wirez server -f proxies.txt -l 127.0.0.1:1080
```

**Limitations:** the `run` subcommand is Linux-only (needs namespaces and TUN). The load balancer server works cross-platform.

**Repo:** https://github.com/v-byte-cpu/wirez — 171 stars, MIT license.