chobits/ngx_http_proxy_connect_module
FreeA forward proxy module for CONNECT request handling
FreeFree tier
About chobits/ngx_http_proxy_connect_module
An Nginx module that adds support for the HTTP CONNECT method, enabling forward proxy functionality to tunnel SSL/TLS requests through proxy servers. It allows Nginx to handle CONNECT requests for HTTPS websites, WebSocket connections, and supports configurable timeouts, port allowlists, basic authentication, and dynamic module builds. Compatible with Nginx, OpenResty, and Tengine.
Key Features
Supports HTTP CONNECT method for SSL/TLS tunneling
Configurable allowed ports (e.g., 443, 563)
Adjustable connect and data timeouts
Compatible with Nginx, OpenResty, and Tengine
Can be built as a dynamic module
Supports basic authentication for proxy
Provides variables for tunnel details (host, port, timing)
Works with WebSocket proxying
Pros & Cons
Pros
- Open source and free to use
- Lightweight and integrates directly with Nginx
- Widely adopted (2k stars, 517 forks on GitHub)
- Provides fine-grained control over timeouts and allowed ports
- Supports multiple Nginx variants (OpenResty, Tengine)
Cons
- Only handles CONNECT method, not general HTTP proxy
- Requires Nginx compilation or module installation
- Compatibility may require specific patch versions for different Nginx releases
- Limited to tunneling, not a full-featured forward proxy
Best For
Forward proxy for HTTPS websites via CONNECT tunnelTunneling SSL requests through a proxy serverProxying WebSocket connectionsSetting up proxy with basic authenticationForward proxy for traffic inspection or security gateways