DeleGate is a multi-purpose application level gateway, or a proxy server which runs on multiple platforms (Unix, Windows, MacOS X and OS/2). DeleGate mediates communication of various protocols (HTTP, FTP, NNTP, SMTP, POP, IMAP, LDAP, Telnet, SOCKS, DNS, etc.), applying cache and conversion for mediated data, controlling access from clients and routing toward servers. It translates protocols between clients and servers, applying SSL(TLS) to arbitrary protocols, converting between IPv4 and IPv6, merging several servers into a single server view with aliasing and filtering. Born as a tiny proxy for Gopher in March 1994, it has steadily grown into a general purpose proxy server. Besides being a proxy, DeleGate can be used as a simple origin server for some protocols (HTTP, FTP and NNTP).
Features:
- NNTPCONF=ondemand to work without making the connection to server
- new MountOption "sni=hostname" for TLS by SNI (server name indication)
- MOUNT to rewrite HTTP Referer ("referer" and "udst" MountOption)
- HTTP connection caching/shareing (-Ecc option)
- Transparent proxy with ipfw (FreeBSD and MacOSX)
- coped with Win95 (has been disabled since 9.2.4)
- HTMUX for bi-directional tunneling over HTTP
- CAPSKEY to enable suppressed capabilities (MITM, VSAP, SockMux, …)
- new VSAP (accept request on a remote host) by HTTP ACCEPT
- supported AUTHORIZER=-ntht, authentication by NTLM over HTTP (Win32)
- NAT based virtual hosting with "odst" MountOption
- name based virtual hosting with "nvhost" MountOption
- reverse proxy and caching to virtual hosting server with "nvserv"
- Transparent proxy by SO_ORIGINAL_DST for any protocols (on Linux)
- Telnet/SSH gateway (Telnet client to SSH server)
- ported onto Windows Mobile/CE
- supported SSL (TLS) server name indication (SNI)
- introduced generalized CLUSTERing of servers
- fast SSL for any protocols using thread
- smooth gzip/HTTP streaming using thread
- generalized routing to upstream proxies with authentication by FORWARD
- transparent cacheing/logging HTTP/FTP/NNTP/SMTP/POP proxy over SOCKS
- loading encrypted parameters in +=enc:… (encrypted by -Fenc)
- privileged operations with set-uid-on-exec flag (without "subin")
- editing configuration parameters implanted in the executable file (-Fimp)
- signing and verifying the executable file of DeleGate
- SOCKS,MASTER,PROXY multiplexed over SockMux
- SOCKS over SSL
- added Man-In-The-Middle mode to peep HTTPS/SSL over HTTP proxy
- supported syslog
