Procsy

HTTP(S) proxy in TypeScript, with Cloudflare Workers.

Features

• IP Spoofing: Hides the IP by generating a random IPv4 at every request with French internet providers prefixes (optional).

Note

The IP is passed through the X-Forwarded-For header, some services may not respect this header.

• CORS: Allows sending requests anywhere by modifying CORS headers.
• Configurable: Easily configurable via Cloudflare Workers environment variables.
• Versatile: Pass the X-Procsy-Base-URL header to control the destination URL (optional).
• SSRF Protection: Blocks requests to private / reserved IP ranges.

Configuration

Procsy reads its configuration from Cloudflare Workers environment variables (vars in wrangler.jsonc).

Variable	Default	Description
DEFAULT_BASE_URL	example.com	The default base URL to proxy requests to.
FORCE_HTTPS	false	Whether to force HTTPS.
ALLOW_ORIGIN	*	Comma-separated list of allowed origins (e.g. google.com, neal.fun).
SPOOF_IP	true	Whether to spoof the IP via X-Forwarded-For.
ALLOW_BASE_URL_HEADER	true	Whether to allow the X-Procsy-Base-URL header to control the destination URL.

For local development, edit wrangler.jsonc under the "vars" key. For production, set these values in the Cloudflare Dashboard → your Worker → Variables, or use wrangler secret put.

Development

Note

We use Bun. Install it before developing.

bun install
bun run dev

Warning

BEFORE EVERY COMMIT, YOU MUST RUN bun run format.

Deployment

bun run deploy