An advanced, automated proxy configuration management system that fetches, validates, tests, enriches, and filters proxy configurations from multiple sources. This project provides enterprise-grade proxy management with real-time health monitoring, geographical tagging, and multi-stage security filtering.
Real-time performance statistics of all configured sources (Telegram channels and URLs). This chart is automatically updated every 12 hours.
π View Full Interactive Dashboard
Important for Forked Repositories:
If you fork this repository, replaceYawStarin the dashboard link above with your GitHub username to access your own analytics dashboard.
Each source is scored based on four key metrics:
- Reliability Score (35%): Success rate in fetching and updating configurations
- Config Quality (25%): Ratio of valid configs to total fetched
- Config Uniqueness (25%): Percentage of unique configs contributed
- Response Time (15%): Server response time and availability
Sources scoring below 30% are automatically disabled to maintain system quality.
- WireGuard - Modern, fast VPN protocol
- Hysteria2 - High-performance proxy protocol
- VLESS - Lightweight VMess alternative
- VMess - Popular V2Ray protocol
- Shadowsocks - Secure SOCKS5 proxy
- Trojan - TLS-based proxy protocol
- TUIC - UDP-based proxy protocol
-
Intelligent Fetching
- Supports Telegram channels, SSCONF links, and custom URLs
- Automatic base64 decoding and format detection
- Duplicate removal and validation
-
Two-Stage Testing System
- Pass 1: Health check using Xray core
- Pass 2: Health check using Sing-box core
- Parallel testing with configurable workers
- Custom timeout and test URL configuration
-
Geographical Enrichment
- Automatic server location detection
- Country flag emoji tagging
- Support for multiple geolocation APIs
- Intelligent fallback system
-
Smart Renaming
- Descriptive tags with protocol details
- Transport type identification (WS, GRPC, HTTP2, etc.)
- Security feature detection (TLS, Reality, XTLS, Vision)
- Port and country information
-
Security Filtering
- Removes insecure encryption methods
- Validates TLS/SSL configurations
- Filters deprecated protocols
- Generates separate secure endpoint files
-
Format Conversion
- Automatic conversion to Sing-box JSON format
- Xray load-balanced configuration generation
- Maintains compatibility with both cores
# Source URLs
SOURCE_URLS = [
"https://t.me/s/your_channel",
"https://raw.githubusercontent.com/user/repo/main/configs.txt",
# Add your sources here
]
# Power Mode
USE_MAXIMUM_POWER = True # Fetch maximum configs
SPECIFIC_CONFIG_COUNT = 50 # Used if USE_MAXIMUM_POWER is False
# Protocol Filtering
ENABLED_PROTOCOLS = {
"wireguard://": False,
"hysteria2://": True,
"vless://": True,
"vmess://": True,
"ss://": True,
"trojan://": True,
"tuic://": False,
}
# Config Age Filtering
MAX_CONFIG_AGE_DAYS = 1
# Sing-box Testing
ENABLE_SINGBOX_TESTER = True
SINGBOX_TESTER_MAX_WORKERS = 8
SINGBOX_TESTER_TIMEOUT_SECONDS = 10
SINGBOX_TESTER_URLS = ['https://www.youtube.com/generate_204']
# Xray Testing
ENABLE_XRAY_TESTER = True
XRAY_TESTER_MAX_WORKERS = 8
XRAY_TESTER_TIMEOUT_SECONDS = 10
XRAY_TESTER_URLS = ['https://www.youtube.com/generate_204']
# Geolocation APIs (in priority order)
LOCATION_APIS = [
'api.iplocation.net',
'freeipapi.com',
'ip-api.com',
'ipapi.co'
]The system generates multiple output files for different use cases:
configs/proxy_configs.txt- Raw fetched configurationsconfigs/proxy_configs_tested.txt- Xray-tested configurationsconfigs/singbox_configs_all.json- All configs in Sing-box formatconfigs/singbox_configs_tested.json- Sing-box tested configsconfigs/singbox_configs_secure.json- Security-filtered Sing-box configsconfigs/xray_loadbalanced_config.json- Load-balanced Xray configconfigs/xray_secure_loadbalanced_config.json- Secure load-balanced Xray configconfigs/location_cache.json- Cached geolocation dataconfigs/channel_stats.json- Source performance metrics
The project uses GitHub Actions for automatic updates:
- Runs twice daily (08:00 and 20:00 UTC)
- Can be triggered manually via workflow_dispatch
- Automatically commits and pushes updated configurations
- Generates performance reports and charts
The workflow performs these steps in order:
- Fetch configs from all sources
- Enrich with geolocation data
- Rename with descriptive tags
- Test with Xray core (Pass 1)
- Convert to Sing-box format
- Test with Sing-box core (Pass 2)
- Filter for security
- Generate load-balanced configs
- Update charts and reports
- Commit and push changes
The system automatically removes:
- Insecure Shadowsocks ciphers (non-AEAD methods)
- VMess with MD5 authentication (deprecated alter_id)
- Unencrypted protocols (VLESS/Trojan without TLS)
- Invalid TLS configurations (insecure=true)
- VMess with security=none
Dedicated secure endpoint files contain only configurations that meet modern security standards:
- Valid TLS/SSL certificates
- Modern encryption algorithms
- No deprecated authentication methods
- Proper certificate validation
- Parallel processing for faster config testing
- Intelligent caching for geolocation data
- Connection pooling for HTTP requests
- Configurable timeouts to balance speed and reliability
- Smart retry logic with exponential backoff
- Resource cleanup to prevent memory leaks
The system supports multiple free geolocation APIs with automatic fallback:
- api.iplocation.net - Unlimited, fast, accurate
- freeipapi.com - 60 req/min, very fast
- ip-api.com - 45 req/min, reliable
- ipapi.co - 1000 req/day
- Automatic URL pattern detection
- Efficient caching to minimize API calls
- Graceful degradation if APIs fail
- No API keys required
The system tracks comprehensive metrics for each source:
- Total configs fetched
- Valid vs invalid ratio
- Unique config contribution
- Average response time
- Success/failure rates
- Overall health score
- SVG Chart - Quick performance overview
- Interactive HTML Report - Detailed analytics with:
- Active/inactive sources
- Protocol distribution
- Response time analysis
- Historical trends
This project is provided for educational and informational purposes only. The developers are not responsible for:
- Any misuse of this software
- Any damage or losses incurred
- The quality or security of third-party proxy configurations
- Violations of local laws or regulations
Users are responsible for:
- Ensuring compliance with local laws
- Verifying the security of configurations
- Understanding the risks of using proxy services
- Respecting the terms of service of proxy providers
This project is licensed under the MIT License - see the LICENSE file for details.
Developed with β€οΈ by YawHackka
- π GitHub: @yawstar
βοΈ Telegram: @yawhackka- π¦ Repository: YawStar Proxy Hunter
- Xray-core - High-performance proxy platform
- Sing-box - Universal proxy platform
- GitHub Actions - Automation infrastructure
Made with π by YawHackka