Free · Open source · Notarized
AnyProxy
Route any app or domain through the right proxy, locally.
AnyProxy is a free, open-source desktop proxy router and rule engine for macOS and Windows. Instead of forcing your entire computer through a slow system VPN, AnyProxy routes specific processes, domains, and ports through your SOCKS5, HTTP, or HTTPS proxies while keeping local traffic direct.
Read the complete desktop proxy routing & rule engine guide →
Version 1.0.1, released 2026-11-13All releases and release notesHow to install and open it the first time
Watch AnyProxy in action
47-second walkthrough covering 1-click System Proxy, live flow inspection, 5-step proxy checks, per-app/domain rules, Compact Mode, and Keychain security.
- 0:00 System-wide proxy router for macOS & Windows
- 0:06 Live flow inspector & instant rule creation
- 0:13 HTTP, HTTPS & SOCKS5 manager + latency ping
- 0:23 Per-app, domain, port & CIDR routing rules
- 0:31 Compact Mode floating widget & 1-click switch
- 0:38 OS Keychain credential vault
What it does
2-tier local proxy gateway
Listens on 127.0.0.1:10800 and speaks both SOCKS5 (with UDP ASSOCIATE) and HTTP CONNECT on a single port, with one-click OS System Proxy auto-configuration.
Per-process & domain rule engine
Match traffic top-down by process name (PID), wildcard domain (*.tiktok.com, *.shopee.vn), IP/CIDR, port, and protocol—routing each to PROXY, DIRECT, or BLOCK.
5-Step Proxy Checker
Verify TCP reachability, SOCKS5/HTTP authentication, exit IP & GeoIP country/ASN, 3x latency + jitter benchmark, and UDP relay support before connecting.
Keychain & Credential Manager vault
Proxy passwords are encrypted with AES-256-GCM inside secrets.vault, unlocked by a 32-byte master key stored in macOS Keychain or Windows Credential Manager.
Compact, Full & Headless CLI modes
Switch between a 336×620 compact one-click Connect widget, a 1180×760 full rule & bandwidth console, or headless CLI mode (anyproxy -c config.yaml).
Proxy chains & .pbprofile migration
Chain multiple upstream proxies sequentially and import or export Proxifier-compatible .pbprofile XML configurations in one click.
AnyProxy vs paid proxyifiers
Built for transparent local routing, hardware-backed credential security, and zero license fees.
| Capability | AnyProxy | Commercial tools (Proxifier, Surge, Paid Proxy Clients) |
|---|---|---|
| License & cost | AnyProxy: 100% free & open source, Apple-notarized macOS & Windows builds | Commercial tools (Proxifier, Surge, Paid Proxy Clients): $40 to $100+ per-seat proprietary licenses |
| Credential storage | AnyProxy: AES-256-GCM vault backed by macOS Keychain & Windows Credential Manager | Commercial tools (Proxifier, Surge, Paid Proxy Clients): Often stored in plaintext XML/JSON profile files on disk |
| Pre-flight proxy verification | AnyProxy: Built-in 5-Step Checker (TCP, Auth, GeoIP, 3x Latency/Jitter, UDP Associate) | Commercial tools (Proxifier, Surge, Paid Proxy Clients): Basic ping or external browser IP checks required |
| Interface & deployment | AnyProxy: Compact 336×620 widget + Full 1180×760 console + Headless CLI binary | Commercial tools (Proxifier, Surge, Paid Proxy Clients): Single desktop window or GUI-only operation |
| Rule matching & chains | AnyProxy: Process (PID), wildcard domain, IP/CIDR, port, protocol + multi-hop chains | Commercial tools (Proxifier, Surge, Paid Proxy Clients): Similar rule matching locked behind paid single-OS licenses |
| Profile portability | AnyProxy: Native YAML config + one-click .pbprofile XML import/export | Commercial tools (Proxifier, Surge, Paid Proxy Clients): Proprietary formats with vendor lock-in |
Installing
Mac (Apple Silicon & Intel)
- Download AnyProxy-darwin-arm64.dmg (Apple Silicon) or AnyProxy-darwin-amd64.dmg (Intel) and drag AnyProxy onto Applications.
- Open AnyProxy directly—macOS builds are signed with an Apple Developer ID certificate and notarized by Apple, so Gatekeeper opens them cleanly.
- When macOS asks whether AnyProxy may access the Keychain or change Network Settings for System Proxy, choose Allow.
Windows
- Download and run AnyProxy-windows-amd64.exe using WebView2 built into Windows 10 and 11.
- If Windows SmartScreen shows “Windows protected your PC”, choose More info → Run anyway.
- Add your SOCKS5 or HTTP proxy, run the 5-Step Check, and click Connect.
Good to know
- macOS builds (.dmg) are Apple Developer ID signed and notarized for both Apple Silicon (arm64) and Intel (amd64).
- Loopback (127.0.0.1, ::1), RFC1918 LAN subnets, .local mDNS, and raw port 53 DNS automatically bypass the proxy to prevent routing loops.
- Pairs seamlessly with AnyProfile when you want isolated browser fingerprints alongside desktop app routing.
SHA-256 checksums
- Download for Mac (Apple Silicon)
- 0cac9a3ad6809efa2318ea7cdaae14806f1c7774ae95d37dcce5a1f52e80a469
- Download for Mac (Intel)
- 092842953bc06f703b9c1bf26317ba8e2046f0cc7df7f5d6eeb6d744627c5959
- Download for Windows
- 7283ba92df277e3859d23a6efb05acf7a496e6974ad2b7a2b9bc128fe772cc48
Privacy
Everything stays on your computer: proxy profiles, routing rules, and connection logs never leave your machine, and credentials are locked in the OS keychain.
There is no account, no cloud server, no telemetry, and no background analytics.
Open source
AnyProxy is free software built in Go and Wails v2. Inspect the source code, verify SHA-256 checksums, or report issues on GitHub.
Source code on GitHubFrequently Asked Questions
Is AnyProxy really 100% free and open source?
Yes. AnyProxy is completely free and open source with no trial limits, no seat licenses, and no cloud account requirement. Both Apple Silicon and Intel macOS builds are signed and notarized by Apple.
How does AnyProxy differ from AnyProfile?
AnyProfile launches isolated Chromium browser profiles with distinct fingerprints and cookies per account. AnyProxy is a system and application proxy router that directs desktop apps, CLI tools, emulators, and OS traffic through SOCKS5/HTTP proxies based on process name, domain, or IP rules.
How does AnyProxy protect my proxy passwords?
Proxy credentials are never stored in plaintext config files. AnyProxy encrypts passwords using AES-256-GCM inside a local secrets.vault file, and stores the 32-byte master key inside macOS Keychain or Windows Credential Manager.
Can I import my existing Proxifier profiles?
Yes. AnyProxy supports importing and exporting .pbprofile XML files so you can migrate your existing proxy servers, chains, and routing rules in seconds.
You are responsible for complying with the terms of service and network policies of every platform and network you connect to.