MTProxyMax flips the usual proxy setup on its head by combining a high-performance Rust MTProto proxy engine with a single bash script that orchestrates the entire platform. This hybrid architecture means you get the best of both worlds: the zero-dependency convenience of a shell script for installation, configuration, and management, alongside the speed and efficiency of a Rust-based proxy core handling the actual network traffic.
What MTProxyMax does and how it’s built
MTProxyMax is a comprehensive management platform for Telegram MTProto proxies, designed around the telemt Rust engine. The core proxy engine is implemented in Rust to handle the heavy lifting of Telegram’s MTProto protocol, which is known for requiring high performance and reliability under load.
Surrounding this is a shell script that acts as the orchestration layer. This script provides an interactive terminal user interface (TUI), a full command-line interface (CLI), and even a Telegram bot with 17 commands for remote proxy administration. This allows admins to manage their proxy instances through multiple convenient interfaces.
The platform supports advanced user management features such as multi-user secrets with configurable bandwidth quotas, device limits, and expiry dates. It also incorporates FakeTLS V2 obfuscation, which mimics genuine TLS 1.3 sessions to evade deep packet inspection (DPI) by censors — crucial for users in restrictive network environments.
Additional features include master-slave replication using rsync+SSH for syncing proxy instances, AES-256 encrypted backups for security, Prometheus metrics for monitoring, SOCKS5 proxy chaining, and an auto-recovery system that can rotate secrets automatically in case of an outage.
The entire stack is designed to run on popular Linux distributions including Ubuntu, Debian, CentOS, RHEL, Fedora, Rocky, AlmaLinux, and Alpine Linux. MTProxyMax will install Docker automatically if it’s not present, simplifying dependencies and container management.
Architectural strengths and tradeoffs
The architecture is unusual but practical: the Rust engine handles the “hot path” of proxy traffic where performance matters most, while the shell script manages orchestration, user interaction, and deployment.
This separation is clever for several reasons:
Zero dependency deployment: The shell script makes installation and configuration straightforward, with minimal dependencies beyond standard Linux tooling and Docker.
Performance-critical code in Rust: Rust provides memory safety and speed, crucial for a proxy handling many concurrent connections.
Rich admin interface: The combined interactive TUI, CLI, and Telegram bot provide flexible operation modes.
The tradeoff is that the orchestration logic lives in shell script, which can be less robust and harder to maintain compared to a more structured language. However, for this use case, the simplicity and ubiquity of bash outweigh the downsides.
The FakeTLS V2 obfuscation is another highlight. Mimicking real TLS 1.3 sessions helps the proxy blend into normal encrypted traffic, which is essential for avoiding blocking by DPI systems. This technique adds complexity but is vital for real-world deployment in censorship-heavy regions.
Multi-user secret management with per-user bandwidth quotas, device limits, and expiry dates shows the platform is designed for both individual and commercial use cases, where different clients might have varied access needs.
Master-slave replication with rsync+SSH allows horizontal scaling and redundancy. AES-256 encrypted backups enhance security, though these features require some sysadmin knowledge to configure effectively.
Prometheus metrics integration is a nice touch for operators who want to monitor proxy health and traffic in production environments.
Quick start
To get MTProxyMax up and running, the project offers a convenient one-line install command that downloads and runs an install script:
sudo bash -c "$(curl -fsSL https://raw.githubusercontent.com/SamNet-dev/MTProxyMax/main/install.sh)"
This interactive wizard walks you through setting the port, domain, first user secret, and optionally configuring the Telegram bot.
Alternatively, for those who prefer manual control, you can download the main script, make it executable, and run the install command:
curl -fsSL https://raw.githubusercontent.com/SamNet-dev/MTProxyMax/main/mtproxymax.sh -o mtproxymax
chmod +x mtproxymax
sudo ./mtproxymax install
After installation, you can launch the interactive TUI or check proxy health with:
mtproxymax # Opens the interactive TUI
mtproxymax status # Checks proxy health
For improved shell experience, you can install bash completion:
sudo mtproxymax completion > /etc/bash_completion.d/mtproxymax
System requirements are modest, needing at least 256MB RAM, root access, and bash 4.2 or higher. It supports various popular Linux distributions and auto-installs Docker if it isn’t found.
Verdict
MTProxyMax targets a niche but real problem: managing Telegram MTProto proxies with robust user controls and obfuscation to evade censorship. Its hybrid architecture is a practical balance, offering both ease of deployment and performance.
The project is well-suited for sysadmins or small teams running Telegram proxies who want fine-grained user management, monitoring, and remote control via multiple interfaces (CLI, TUI, Telegram bot). The FakeTLS obfuscation and master-slave replication features show it’s built for real-world, potentially hostile network environments.
That said, the reliance on bash scripting for orchestration might feel fragile for larger-scale or highly customized deployments. Also, root access and Linux-only support limit its use in some contexts.
Overall, MTProxyMax is a solid tool if you need a Telegram MTProto proxy solution combining performance, obfuscation, and flexible management without heavy dependencies. Worth checking out if you run Telegram proxies in restrictive networks and want a relatively simple but powerful management platform.
Related Articles
- rtk: A Rust CLI proxy that cuts LLM token usage by up to 90% with transparent command rewriting — rtk is a Rust CLI proxy that intercepts shell commands to reduce LLM token consumption by 60-90% using a transparent Bas
- Rockxy: a native macOS HTTP debugging proxy with AI-assisted observability — Rockxy is a macOS-native HTTP debugging proxy written in Swift, featuring MITM TLS interception, sandboxed JavaScriptCor
- PasteGuard: a local privacy proxy for masking sensitive data in LLM requests — PasteGuard intercepts API calls to OpenAI and Anthropic, masking over 30 types of sensitive data across 24 languages bef
- rs-top: agentless remote system monitoring via SSH with a Rust TUI — rs-top is a Rust-based lightweight remote system monitor that uses SSH to provide a real-time TUI dashboard without any
- Traefik: dynamic reverse proxy and load balancer for microservices — Traefik is a Go-based reverse proxy and load balancer that automatically configures routes by integrating with orchestra
→ GitHub Repo: SamNet-dev/MTProxyMax ⭐ 459 · Shell