an enterprise grade forward proxy built for performance, with mandatory per instance authentication
G3 Proxy is a high performance, generic proxy server written in Rust, the proxy component of ByteDance's g3 project. It serves as an HTTP and HTTPS forward proxy that routes outbound web traffic through a single controlled gateway, with native user authentication, ingress and egress access control lists, destination port restrictions and structured logging, all from one lean binary.
cloudimg ships G3 Proxy secure by default: proxy authentication is mandatory and a unique proxy username and password are generated on first boot rather than baked into the image, so anonymous requests are refused. Access is restricted to private client ranges so it is never an open relay, the cloud metadata and link local range is blocked to prevent server side request forgery, and destination ports are limited to standard web ports. The image is kept fully patched, ships with a paired deployment guide, and is backed by 24/7 support.