UA3FAdvanced Network Traffic Rewriting Proxy

Transparently rewrite HTTP(S) traffic in HTTP, SOCKS5, TPROXY, REDIRECT, and NFQUEUE modes.

Multiple server modes

Run as HTTP, SOCKS5, TPROXY, REDIRECT, or NFQUEUE to support explicit proxy and transparent gateway deployments.

Match domains, ports, IP ranges, headers, and URLs, then rewrite, delete, reject, drop, or redirect traffic.

Enable MitM for selected hostnames to rewrite request and response headers or bodies over HTTPS.

Ships opkg/apk packages, LuCI integration, Clash coexistence examples, and transparent proxy modes.

Rewrite TTL, IPID, TCP Timestamp, and TCP Initial Window, with TCP reordering and injection based Desync support.

Query version, configuration, rules, and logs through the built-in RESTful API.