GitPedia

Nsproxy

Network-native containerization system for the desktop

From ple1n·Updated May 12, 2026·View on GitHub·

- You can run dockerd within a container, with everything proxied by a SOCK5 proxy - The sandbox may defend against _casual_ attackers, or otherwise unnecessary state-cross-contamination of softwares - The codebase is a singleton in full Rust. You are expected to modify the code. - Native [alacritty](https://github.com/alacritty/alacritty) integration at full speed - It's shipped with a GUI written with EGUI, meant to daily-drive desktop with paranoia-level of network control - You can control t... The project is written primarily in Rust, distributed under the MIT License license, first published in 2023. Key topics include: network-namespace, opsec, privacy, proxychains, systemd.

Latest release: v3.2.3
December 6, 2025View Changelog →

Network-native containerization system

nsproxy, network-namespace with SOCKS5 proxy

  • You can run dockerd within a container, with everything proxied by a SOCK5 proxy
  • The sandbox may defend against casual attackers, or otherwise unnecessary state-cross-contamination of softwares
  • The codebase is a singleton in full Rust. You are expected to modify the code.
  • Native alacritty integration at full speed
  • It's shipped with a GUI written with EGUI, meant to daily-drive desktop with paranoia-level of network control
  • You can control the degree of isolation. In the least isolated case, only network namespace is unshared, such that no softwares break.
  • status, branch main is always production-ready

Contributors

Showing top 1 contributor by commit count.

View all contributors on GitHub →

This article is auto-generated from ple1n/nsproxy via the GitHub API.Last fetched: 6/21/2026