How to Route Desktop Apps, CLI Tools & Emulators Through Proxies Locally with AnyProxy

Browser extensions and antidetect profiles isolate web sessions inside Chromium, but desktop apps, command-line tools, Android emulators, and background daemons bypass browser settings completely. Conversely, turning on a system-wide VPN tunnels every single process on your machine through one exit IP—breaking local dev servers, LAN discovery, and latency-sensitive workflows.

AnyProxy is a free, open-source, local-first proxy router and rule engine for macOS (Apple Silicon and Intel) and Windows. Built in Go and Wails v2 as a native counterpart to Proxifier, it routes traffic per process, domain, IP/CIDR, and port through your own SOCKS5, HTTP, and HTTPS proxies—without subscription fees or closed-source kernel drivers.

Why system VPNs and browser extensions fall short

When you manage multi-region operations, test geo-restricted APIs, or run mobile emulators alongside local browsers, network routing usually hits three bottlenecks:

1. All-or-nothing VPNs — a full-tunnel VPN forces your IDE, video calls, and local database connections through a remote tunnel, adding latency and risking account correlation if the tunnel drops.
2. Silent proxy ignorance — many desktop apps, Electron wrappers, and CLI tools ignore OS proxy environment variables unless traffic is explicitly captured or directed through a local gateway.
3. Plaintext credential exposure — pasting user:pass@host:port into shell scripts, .env files, or third-party apps leaves proxy credentials exposed in process lists and command histories.

How AnyProxy structures local traffic routing

Instead of routing your entire operating system blindly, AnyProxy operates a lightweight 2-tier architecture on your computer:

• Local inbound gateway (127.0.0.1:10800): A single local listener accepts both SOCKS5 (including UDP ASSOCIATE) and HTTP CONNECT / forward proxy traffic simultaneously on one port.
• OS System Proxy automation: With one toggle, AnyProxy configures macOS (networksetup across active network services) or Windows (HKCU\...\Internet Settings) to point at its local listener, and restores your original network state cleanly on exit.
• Top-down Rule Engine: Every outbound connection is matched against ordered rules by process name (PID), target domain/wildcard (*.tiktok.com, *.shopee.vn), IP/CIDR, port, and protocol (TCP/UDP), then dispatched to PROXY (a specific proxy or proxy chain), DIRECT, or BLOCK.
• Fail-safe local bypass: Loopback (127.0.0.1, ::1), RFC1918 LAN subnets, .local mDNS, and raw :53 DNS queries automatically bypass the proxy tunnel to prevent routing loops.

Verifying proxies before production use

Dead or misconfigured proxies cause silent connection drops or IP leaks. AnyProxy includes a 5-Step Proxy Checker that tests every endpoint before you route traffic through it:

1. TCP Reachability — measures raw socket handshake time to the proxy host.
2. Protocol Handshake & Auth — verifies SOCKS5 (RFC 1928/1929) or HTTP CONNECT authentication without leaking credentials.
3. HTTP Probe & GeoIP — fetches the exit IP, country, city, and ASN through the tunnel.
4. 3x Latency Benchmark — runs three consecutive round-trips to report minimum, average, and maximum latency plus jitter.
5. SOCKS5 UDP Associate — tests whether the upstream proxy supports UDP relay for QUIC, WebRTC, or gaming/voice traffic.

Hardware-backed credential security & dual-mode UI

Proxy passwords never sit in plaintext JSON files. AnyProxy encrypts credentials with AES-256-GCM inside a local secrets.vault file whose master key is stored in macOS Keychain or Windows Credential Manager. You can also import and export .pbprofile XML profiles to migrate existing Proxifier setups in seconds.

For daily operation, AnyProxy switches seamlessly between two native desktop views plus a headless CLI:

• Compact Mode (336×620): A minimal widget with a hero Connect button, active proxy selector, live throughput sparkline, and 1-click System Proxy toggle.
• Full Mode (1180×760): The complete workspace with the 5-step checker, rule matrix, proxy chains, real-time connection table, and per-process bandwidth monitor.
• Headless CLI: Run anyproxy -c config.yaml on servers, CI runners, or background terminal sessions without launching a GUI.

Pairing AnyProxy with AnyProfile and residential proxies

Use AnyProfile when you need isolated Chromium browser fingerprints and per-tab cookie separation, and pair it with AnyProxy when you need to route external desktop apps, CLI scrapers, or emulators through dedicated upstream proxies. Compare vetted residential and ISP proxy providers in the Proxy Provider Rankings.

Quick start workflow

1. Download the Apple-notarized macOS .dmg (Apple Silicon or Intel) or Windows .exe from the AnyProxy download page.
2. Add your SOCKS5, HTTP, or HTTPS proxy in Proxies and run the 5-Step Check to confirm exit IP and latency.
3. Create routing rules in Rules (for example, route Telegram, LDPlayer, or *.amazon.com through your proxy, while keeping local dev traffic DIRECT).
4. Click Connect in Compact or Full mode and monitor live connections and bandwidth in real time.

To inspect the source code, read the headless CLI docs, or report issues, visit the AnyProxy GitHub repository.