Ghostunnel: Open-Source TLS Proxy Released for Secure Connections

• •Ghostunnel is an open-source TLS proxy for applications lacking native TLS support.
• •It supports mutual TLS authentication and fine-grained access control via certificate checks.
• •Ghostunnel is available for multiple platforms and can be built as a single static binary.

Ghostunnel, an open-source TLS proxy, was released on November 4, 2026, enabling secure connections for applications that do not support TLS natively. It operates in two modes: server mode, which accepts TLS connections and proxies them to a backend service, and client mode, which wraps plaintext connections in TLS. The tool supports mutual TLS authentication and allows for fine-grained access control via certificate checks and Open Policy Agent policies. Certificates can be sourced from various locations, including Let's Encrypt and hardware security modules. Ghostunnel emphasizes security by default, restricting listeners and targets to localhost and UNIX sockets unless explicitly overridden. It is available for Linux, macOS, Windows, and BSD systems, and can be built as a single static binary. The project is licensed under Apache 2.0 and can be found on GitHub.