ProxyTun captures all outbound IPv4 traffic — games, IDEs, terminals, background updaters — and routes it through your SOCKS5 or HTTPS proxy according to rules you define. One toggle. System-wide control. The modern alternative to Proxifier.
The Problem
Modern Alternative
Proxifier has been the go-to Windows proxy routing tool for years — but it's closed-source and built on aging architecture. ProxyTun was engineered from scratch on modern primitives (WinTUN, gVisor, WFP), is actively developed, and includes features Proxifier simply doesn't have. Competitively priced per term, actively maintained, and built to keep improving.
| Proxifier | ProxyTun | |
|---|---|---|
| Price | $39.95 one-time, no updates | from $9.99 / year — updates included |
| Active development | Infrequent updates | Actively maintained |
| Protocol support | SOCKS5, HTTPS | SOCKS5, HTTPS |
| Per-app rules | Yes | Yes |
| Per-domain rules | Limited | Full (equals / contains / suffix / keyword) |
| DNS leak mitigation | Partial | Fake-IP + WFP firewall rules |
| Fail-closed (blocked apps) | No | Yes — kernel WFP filters |
| Multiple named proxies | Yes | Yes |
| Architecture | Legacy kernel driver (LSP/WFP) | WinTUN + gVisor userspace stack |
| UI style | Desktop window | System-tray popup + minimal window |
| Free tier | No free tier | Free forever · timed sessions · no key |
How It Works
ProxyTunCore runs as an auto-start Windows Service. A one-time install with administrator rights sets up the virtual network adapter. After that, it starts automatically with Windows.
Open Settings. Add your SOCKS5 or HTTPS proxy server. Define rules: which apps go direct, which domains use the proxy, which connections are rejected. Drag .exe files straight into the rules editor.
Click the toggle in the compact popup window or from the system tray. The tunnel intercepts all outbound IPv4 traffic instantly. Watch live upload/download speeds in the speed graph.
Features
Routes all IPv4 traffic — not just your browser — through SOCKS5 or HTTPS proxies. Multiple named proxies with per-rule assignment.
Match by process name, executable path, domain (equals / contains / suffix / keyword), or IP range. Top-to-bottom evaluation; first match wins. Three actions: Proxy, Direct, Reject.
Fake-IP DNS routing keeps domain names visible to the rule engine without exposing them to your real resolver. WFP-level firewall rules block rogue DoH/DoT endpoints and port-53 bypass attempts.
Designate critical apps that must never reach the internet if the proxy is unavailable. Kernel-level WFP filters drop their outbound connections instantly when the tunnel is off or the proxy is unhealthy.
Real-time upload and download rates from the service, displayed in the compact popup. Always know your throughput at a glance.
Clean Qt6 UI with QSS stylesheet themes. Works in the system tray with minimal screen real estate. Frameless popup, settings dialogs, and a full rules editor.
Rule Engine
Rules are evaluated top to bottom. The first match wins. You can mix and match rule types in any order, assign a specific proxy per rule, and reorder rows with drag and drop.
| PROCESS-NAME | steam.exe | → DIRECT |
| DOMAIN | google.com | → PROXY |
| DOMAIN | ads [CONTAIN] | → REJECT |
| IP-CIDR | 192.168.0.0/16 | → DIRECT |
| MATCH | (everything else) | → PROXY |
Architecture
ProxyTun uses WinTUN (the same driver used by WireGuard) for the virtual adapter, gVisor's userspace TCP/IP stack for packet reconstruction, and Windows Filtering Platform (WFP) for the fail-closed app-blocking layer. No kernel drivers to write or maintain.
Pricing
Free forever with timed sessions — no credit card, no license key. Buy a term when you want uninterrupted use.
Forever · Timed sessions · No license key
Download FreeOne-time · Pick 1–12 months · 1 PC
Buy monthsOne-time · Pick 1–3 years · 1 PC
Buy yearsNeed help choosing a term? Contact us →
Free forever with timed sessions. No credit card. No license key until you buy. Runs on Windows 10 and 11 (64-bit). Requires administrator rights for the one-time service install.
Download Free — Windows 10 / 11FAQ
Download and run ProxyTun — no credit card and no license key. Free includes the full app; tunnel sessions auto-disconnect after a few minutes with an upgrade popup. When you are ready, buy 1–12 months or 1–3 years — a purchase code is emailed instantly; redeem it in the app for uninterrupted use.
Yes. ProxyTun is the client-side routing layer; you need an external SOCKS5 or HTTPS proxy (or server you control) to forward traffic through.
The bottleneck is your upstream proxy, not ProxyTun itself. The userspace TCP/IP stack adds negligible overhead on modern hardware.
Running ProxyTun alongside a full-tunnel VPN or another WinTUN-based tool (e.g. WireGuard in full-tunnel mode) can cause routing conflicts — only one tool should own the default route at a time.
ProxyTun focuses on IPv4. IPv6 is limited; AAAA responses for proxied paths are suppressed to avoid bypass, but native IPv6 is not fully handled.
DNS UDP is fully handled via the fake-IP mechanism. General proxied UDP (other than DNS) is not yet implemented; TCP is the primary supported transport.
When Blocked Apps is enabled, ProxyTun installs kernel-level WFP filters for the listed executables. When the tunnel is off or the proxy is unreachable, those filters drop all outbound connections from those apps — they cannot fall back to a direct connection.
After buying a term, you get a purchase code like PXT3M-482-193-706 (3 months) or PXT2Y-482-193-706 (2 years) by email (and on screen). Open Settings → License in the app, enter the code, and it is redeemed on that PC. Expiry starts at redeem time — not when you paid.
No. Each purchase code licenses exactly one PC, bound to that machine automatically when you redeem. Need a different PC later? See “I got a new PC” below.
The app returns to Free on that PC (timed sessions + upgrade popup). Nothing is deleted — your rules and settings stay put. Buy a new code any time for another uninterrupted term; renewals are supported.
Email us from the address you used at purchase, or use the support form. We can look it up and resend it.
Yes. Contact support for a reissue: we clear the old machine binding and license key, set the code back to pending redemption, and you redeem it on the new PC with the remaining term intact.
Refunds are handled manually. Contact support@hexgle.com — if approved, we refund via the original payment provider and revoke the code.