ProxyTun captures all outbound IPv4 traffic — games, IDEs, terminals, background updaters — and routes it through your SOCKS5 or HTTPS proxy according to rules you define. One toggle. System-wide control. The modern alternative to Proxifier.
The Problem
Modern Alternative
Proxifier has been the go-to Windows proxy routing tool for years — but it's closed-source and built on aging architecture. ProxyTun was engineered from scratch on modern primitives (WinTUN, gVisor, WFP), is actively developed, and includes features Proxifier simply doesn't have. Competitively priced per term, actively maintained, and built to keep improving.
| Proxifier | ProxyTun | |
|---|---|---|
| Price | $39.95 one-time, no updates | from $39.00 / year — updates included |
| Active development | Infrequent updates | Actively maintained |
| Protocol support | SOCKS5, HTTPS | SOCKS5, HTTPS |
| Per-app rules | Yes | Yes |
| Per-domain rules | Limited | Full (equals / contains / suffix / keyword) |
| DNS leak mitigation | Partial | Fake-IP + WFP firewall rules |
| Fail-closed (blocked apps) | No | Yes — kernel WFP filters |
| Multiple named proxies | Yes | Yes |
| Architecture | Legacy kernel driver (LSP/WFP) | WinTUN + gVisor userspace stack |
| UI style | Desktop window | System-tray popup + minimal window |
| Trial | No free trial | 14 days free, no credit card |
How It Works
ProxyTunCore runs as an auto-start Windows Service. A one-time install with administrator rights sets up the virtual network adapter. After that, it starts automatically with Windows.
Open Settings. Add your SOCKS5 or HTTPS proxy server. Define rules: which apps go direct, which domains use the proxy, which connections are rejected. Drag .exe files straight into the rules editor.
Click the toggle in the compact popup window or from the system tray. The tunnel intercepts all outbound IPv4 traffic instantly. Watch live upload/download speeds in the speed graph.
Features
Routes all IPv4 traffic — not just your browser — through SOCKS5 or HTTPS proxies. Multiple named proxies with per-rule assignment.
Match by process name, executable path, domain (equals / contains / suffix / keyword), or IP range. Top-to-bottom evaluation; first match wins. Three actions: Proxy, Direct, Reject.
Fake-IP DNS routing keeps domain names visible to the rule engine without exposing them to your real resolver. WFP-level firewall rules block rogue DoH/DoT endpoints and port-53 bypass attempts.
Designate critical apps that must never reach the internet if the proxy is unavailable. Kernel-level WFP filters drop their outbound connections instantly when the tunnel is off or the proxy is unhealthy.
Real-time upload and download rates from the service, displayed in the compact popup. Always know your throughput at a glance.
Clean Qt6 UI with QSS stylesheet themes. Works in the system tray with minimal screen real estate. Frameless popup, settings dialogs, and a full rules editor.
Rule Engine
Rules are evaluated top to bottom. The first match wins. You can mix and match rule types in any order, assign a specific proxy per rule, and reorder rows with drag and drop.
| PROCESS-NAME | steam.exe | → DIRECT |
| DOMAIN | google.com | → PROXY |
| DOMAIN | ads [CONTAIN] | → REJECT |
| IP-CIDR | 192.168.0.0/16 | → DIRECT |
| MATCH | (everything else) | → PROXY |
Architecture
ProxyTun uses WinTUN (the same driver used by WireGuard) for the virtual adapter, gVisor's userspace TCP/IP stack for packet reconstruction, and Windows Filtering Platform (WFP) for the fail-closed app-blocking layer. No kernel drivers to write or maintain.
Pricing
One-time purchase per term. Start with a 14-day free trial — no credit card required.
14 days · Full features · No credit card
Start Free TrialOne-time purchase · 1 PC · 1 year of updates
Buy 1 yearOne-time purchase · 1 PC · 2 years of updates
Buy 2 yearsOne-time purchase · 1 PC · 3 years of updates
Buy 3 yearsNeed help choosing a term? Contact us →
14-day free trial. No credit card. Runs on Windows 10 and 11 (64-bit). Requires administrator rights for the one-time service install.
Start Free Trial — Windows 10 / 11FAQ
Download and run ProxyTun — no credit card needed. You get the full product for 14 days. When you are ready, purchase a license (1, 2, or 3 year terms) and a purchase code is emailed to you instantly; redeem it in the app to unlock that term.
Yes. ProxyTun is the client-side routing layer; you need an external SOCKS5 or HTTPS proxy (or server you control) to forward traffic through.
The bottleneck is your upstream proxy, not ProxyTun itself. The userspace TCP/IP stack adds negligible overhead on modern hardware.
Running ProxyTun alongside a full-tunnel VPN or another WinTUN-based tool (e.g. WireGuard in full-tunnel mode) can cause routing conflicts — only one tool should own the default route at a time.
ProxyTun focuses on IPv4. IPv6 is limited; AAAA responses for proxied paths are suppressed to avoid bypass, but native IPv6 is not fully handled.
DNS UDP is fully handled via the fake-IP mechanism. General proxied UDP (other than DNS) is not yet implemented; TCP is the primary supported transport.
When Blocked Apps is enabled, ProxyTun installs kernel-level WFP filters for the listed executables. When the tunnel is off or the proxy is unreachable, those filters drop all outbound connections from those apps — they cannot fall back to a direct connection.
After buying a term, you get a purchase code like PXT1Y-482-193-706 by email (and on screen). Open Settings → License in the app, enter the code, and it is redeemed on that PC. Expiry starts at redeem time — not when you paid.
No. Each purchase code licenses exactly one PC, bound to that machine automatically when you redeem. Need a different PC later? See “I got a new PC” below.
The app reverts to its trial-expired state on that PC (tunnel toggle disabled). Nothing is deleted — your rules and settings stay put. Buy a new code any time to unlock another term; renewals are supported.
Email us from the address you used at purchase, or use the support form. We can look it up and resend it.
Yes. Contact support for a reissue: we clear the old machine binding and license key, set the code back to pending redemption, and you redeem it on the new PC with the remaining term intact.
Refunds are handled manually. Contact support@proxytun.io — if approved, we refund via the original payment provider and revoke the code.