repository·main·Indexed 19 days ago
https://github.com/mitmproxy/mitmproxy_rsRust implementation of core mitmproxy components providing high-performance proxying capabilities. It includes WireGuard mode, platform-specific traffic redirection for macOS, Windows, and Linux, and specialized crates for syntax highlighting (mitmproxy-highlight) and content views (mitmproxy-contentviews). The project provides Python bindings via mitmproxy-rs and utilizes technologies such as eBPF for Linux redirection and WinDivert for Windows.
mitmproxy_rs contains the Rust-based components of mitmproxy, providing high-performance core logic and specialized proxying modes. Key features include:
windows-redirector.exe is a component designed to redirect network traffic to mitmproxy on Windows systems. It operates by spawning with elevated privileges and communicating with mitmproxy via a Windows named pipe.mitmproxy-highlight crate provides the syntax highlighting backend used by mitmproxy and mitmdump. It leverages tree-sitter to perform high-performance syntax highlighting for various data formats and languages encountered during proxying.The mitmproxy-windows package provides the necessary components to redirect Windows network traffic to mitmproxy. It consists of:
windows-redirector.exe: A Rust-based executable that handles traffic redirection to mitmproxy using a Windows named pipe.The macOS transparent interception system consists of three primary components:
macos-redirector: The macOS app bundle responsible for setting up and hosting the network extension.network-extension: The system-level extension that performs the actual traffic redirection.ipc: The Inter-Process Communication layer using Protobuf to facilitate communication between the proxy (written in Rust) and the redirector (written in Swift).The mitmproxy-macos package provides two primary precompiled binaries for macOS users:
macos-certificate-truster.app: A Rust-based helper application used to mark the mitmproxy Certificate Authority (CA) as trusted on the system.Mitmproxy Redirector.app: An app bundle that sets up and hosts the macOS Network System Extension required for traffic redirection.mitmproxy-highlight is a Rust crate, its functionality is exposed to the Python layer of mitmproxy through the mitmproxy-rs bindings. Specifically, the syntax highlighting logic is accessible via mitmproxy-rs/src/syntax_highlight.rs.On macOS, automating the process of adding and trusting a certificate is restricted by GUI-based security limitations. The macos-certificate-truster bundle app is used to bypass these restrictions, allowing for automated certificate management.
Key characteristics:
For technical details regarding these security restrictions, refer to the Apple Documentation on SecTrustSettingsSetTrustSettings.
The repository is organized into several specialized packages that extend mitmproxy's capabilities:
mitmproxy (in src/): The core Rust crate containing the primary logic.mitmproxy-rs: Python bindings for the Rust crate using PyO3. Available on PyPI.mitmproxy-macos: A macOS Network Extension for transparent traffic interception. Available on PyPI as a binary distribution.mitmproxy-windows: A Windows traffic redirector based on WinDivert. Available on PyPI as a binary distribution.mitmproxy-linux: A Linux traffic redirector based on Aya. Available on PyPI.mitmproxy-contentviews: Pretty-printers for HTTP message bodies.mitmproxy-highlight: Syntax highlighting backend for mitmproxy and mitmdump.mitmproxy-linux-ebpf: The eBPF program used by the Linux redirector.mitmproxy-linux-ebpf-common: Shared data structures between user space and eBPF.Transparent interception on macOS is achieved through a coordinated effort between mitmproxy-rs and a macOS app bundle. The process follows these steps:
mitmproxy-rs calls start_local_redirector, which copies the macos-redirector app bundle into /Applications (required for system extension installation).mitmproxy-rs opens a Unix socket listener and launches the macos-redirector app, passing the Unix socket path as a command-line argument.macos-redirector app installs the system extension and configures the transparent proxy settings.network-extension, which connects back to mitmproxy-rs via a Unix socket to establish a control channel.mitmproxy-rs sends an intercept spec (defining which applications to intercept) to the network extension.mitmproxy-rs. This architecture ensures that each connection has its own buffers and backpressure management.To build the mitmproxy-linux-redirector from source, you must have the following dependencies installed:
cargo install --locked bpf-linkercargo install --locked bpf-linkermitmproxy-contentviews crate provides various content views for mitmproxy. These views are exposed to the Python layer through the mitmproxy-rs bridge. To use these content views in your Python-based mitmproxy addons or scripts, you must interact with the interface exposed in mitmproxy-rs/src/contentviews.rs.