A lightweight Docker image, designed for easy connection to CloudFlare WARP, exposing
socks5proxy all together.
Multi-platform: linux/amd64, linux/arm64, linux/arm, and linux/s390x;
The new features will undergo pre-release testing at rws-cli.
+1. automatically enroll the WARP+ account plan+2. eBFP featured wireguard implement+3. more OS/platform support+4. access toOpenAI Sorawithout effort+5. 96.3% lighter(only8MB) inalpinecore run in more small devices!+6. from10sto0.1sclone speed up from dockerhub!+7. Enhance robustness to handle restartorreboot events!+8. all in one caller written in Rust!!!+9. Used to join in theSORARED TEAM waitlist!+10. Used to join in theGemini 1.5waitlist!+11. Used to join in theSD 3.0waitlist!+12. Used to use theClaude 3 Opus!+13. Enable to joinZero-Trustteam plan with Unlimited traffic plan!- Automatically install and config CloudFlare WARP Client in Docker
- Enable the access of WARP network from Docker Container's SOCKS5 port
- Extend accessibility and avoid potential restrictions by using proxy services
- Avoid looping verification in the Midjourney Discord Channel
- Prevent being banned by proxying API calls
- Successfully pre-process the AI WaitList
- Develop apps with warp embedded
Bypass the New Bing wait-list- ...
The official warp-cli only support amd64 machines, and its guide is prone to causing potential connection loss risks on remote machines. It is recommended to experiment with fresh installations within a docker container, or you have to reboot it via the panel.
With any existed running proxy service, it acts just like a plugin that helps unlock public content such as OpenAI Sora, OpenAI ChatGPT,OpenAI GPT-4, OpenAI GPT-4V, Claude, Claude 2, Claude 3 Opus, Google BardGoogle Gemini, Google Gemini Pro Vision, Google Gemini Advanced, Google PaLM2 APIGoogle Vertex API, Google Scholar, and Netflix. No necessary to have any knowledge of CloudFlare, Warp, WireGuard, and WGCF before using this image.
The v1 image is built on debian:bookworm aka debian:12, we recently migrate from v1 to v2, which based on a more lighter container alpine:3.19. The main line will transition within a month, with minimal impact on the user side. As a contingency plan, users can revert to monius/docker-warp-socks:v1 if needed.
Please follow the EXAMPLES 1.1 and 2.1 To Get Start !
# in case, you have no docker-ce installed;
curl -fsSL "https://get.docker.com" | sudo bash
# to avoid `sudo` calling
sudo usermod -aG docker ${USER}
# or check https://docs.docker.com/engine/security/rootless
# if required a rootless install with `dockerd-rootless-setuptool.sh install`
# in case, using Centos/RedHatEL
sudo systemctl enable docker && sudo systemctl start dockerRun the following commands in your terminal:
docker run --privileged --restart=always -itd \
--name warp_socks \
--cap-add NET_ADMIN \
--cap-add SYS_MODULE \
--sysctl net.ipv6.conf.all.disable_ipv6=0 \
--sysctl net.ipv4.conf.all.src_valid_mark=1 \
-v /lib/modules:/lib/modules \
-p 9091:9091 \
monius/docker-warp-socksThe above command will create a background service that allows the entire container network to join the dual-stack cloudflare network pool without disconnecting from the host.
docker run --privileged --restart=always -itd \
--name warp_socks_plus \
-e WGCF_LICENSE_KEY=yourpluslicense \
--cap-add NET_ADMIN \
--cap-add SYS_MODULE \
--sysctl net.ipv6.conf.all.disable_ipv6=0 \
--sysctl net.ipv4.conf.all.src_valid_mark=1 \
-v /lib/modules:/lib/modules \
-p 9091:9091 \
monius/docker-warp-socksRun, curl -x "socks5h://127.0.0.1:9091" -fsSL "https://www.cloudflare.com/cdn-cgi/trace";
See plus means WARP Plus License Key applied success.
Run the following commands in your terminal:
docker run --privileged --restart=always -itd \
--name warp_socks_passwd \
-e SOCK_USER=monius \
-e SOCK_PWD=passwd \
--cap-add NET_ADMIN \
--cap-add SYS_MODULE \
--sysctl net.ipv6.conf.all.disable_ipv6=0 \
--sysctl net.ipv4.conf.all.src_valid_mark=1 \
-v /lib/modules:/lib/modules \
-p 9091:9091 \
monius/docker-warp-socksThe above command will add a little encryption to the existed socks connection, just a little~
Run, curl -U "monius:passwd" -x "socks5h://127.0.0.1:9091" -fsSL "https://www.cloudflare.com/cdn-cgi/trace" to go 🤗
To use your prepared config:
docker run --privileged --restart=always -itd \
--name warp_socks \
-e SOCK_USER=monius \
-e SOCK_PWD=cool \
--cap-add NET_ADMIN \
--cap-add SYS_MODULE \
--sysctl net.ipv6.conf.all.disable_ipv6=0 \
--sysctl net.ipv4.conf.all.src_valid_mark=1 \
-p 127.0.0.1:9091:9091 \
-v /lib/modules:/lib/modules \
-v ~/wireguard/:/opt/wireguard/:ro \
monius/docker-warp-socksIt will also recognize the prepared wgcf-profile.conf and danted.conf if they are located in ~/wireguard/.
Use -v ~/wireguard/:/opt/wireguard/:ro to map the directory.
And, -p 127.0.0.1:9091:9091 will create a localhost(127.0.0.1) access-only 9091 port to secure the connection.
To output the network test log:
# Host
curl -x "socks5h://127.0.0.1:9091" -fsSL "https://www.cloudflare.com/cdn-cgi/trace"
# See`warp=on` means success. docker-compose.yml could replace some args in a file to run a container.
If you don't have Docker-Compose installed, following this:
sudo curl -fsSL <https://github.com/docker/compose/releases/download/v2.17.2/docker-compose->`uname -s`-`uname -m` > /usr/bin/docker-compose
sudo chmod +x /usr/bin/docker-compose#start
curl -fsSL https://bit.ly/docker-warp-socks-compose | docker-compose -f - up -d --wait && curl --proxy socks5h://127.0.0.1:9091 "https://www.cloudflare.com/cdn-cgi/trace"
#stop
curl -fsSL https://bit.ly/docker-warp-socks-compose | docker-compose -f - down 
Click the CLOSE button, Replace the $IP with the given one on the top side, then run:
curl -x "socks5h://$IP:9091" -fsSL "https://www.cloudflare.com/cdn-cgi/trace"
To use Docker Stack, first perform the Swarm Initialized by:
# create
docker swarm init
# leave
docker swarm leave --force# create
curl -fsSL https://bit.ly/docker-warp-socks-compose | docker stack deploy -c - TEST
# remove
docker stack rm TESTdocker infodocker node lsdocker network lsdocker stack ps TESTdocker stack services TESTdocker service lsdocker service logs TEST_warp-socksdocker service inspect TEST_warp-socks
# in swarm mode, the ip addr is random
TID=`docker ps -aqf "name=^TEST_warp-socks"`
IF=`docker exec $TID sh -c "ip route show default" | awk '{print $5}'`
TIP=`docker exec $TID sh -c "ifconfig $IF" | awk '/inet /{print $2}' | cut -d' ' -f2`
curl -x "socks5h://127.0.0.1:9091" -fsSL "https://www.cloudflare.com/cdn-cgi/trace"
For those who has amd64 remote machine and don't need to use docker to secure network connection, I suggest to use the official warp-cli as following:
curl -fsSL https://pkg.cloudflareclient.com/pubkey.gpg \
| sudo gpg --yes --dearmor --output /etc/apt/trusted.gpg.d/cloudflare-warp.gpg
echo "deb https://pkg.cloudflareclient.com $(lsb_release -cs) main" \
| sudo tee /etc/apt/sources.list.d/cloudflare-warp.list > /dev/null
sudo apt-get -qq update && sudo apt-get -qq install cloudflare-warp
echo y | warp-cli register
warp-cli set-mode proxy
warp-cli set-proxy-port 9091
warp-cli connect
# test
curl -x "socks5h://127.0.0.1:9091" -fsSL "https://www.cloudflare.com/cdn-cgi/trace"
# See`warp=on` means success. Prepare WGCF_LICENSE_KEY="xxxxxxx"
curl -fsSL https://pkg.cloudflareclient.com/pubkey.gpg \
| sudo gpg --yes --dearmor --output /etc/apt/trusted.gpg.d/cloudflare-warp.gpg
echo "deb https://pkg.cloudflareclient.com $(lsb_release -cs) main" \
| sudo tee /etc/apt/sources.list.d/cloudflare-warp.list > /dev/null
sudo apt-get -qq update && sudo apt-get -qq install cloudflare-warp
echo y | warp-cli registration new && warp-cli registration license "$WGCF_LICENSE_KEY"
warp-cli mode proxy
warp-cli proxy port 9091
warp-cli connect
# test
curl -x "socks5h://127.0.0.1:9091" -fsSL "https://www.cloudflare.com/cdn-cgi/trace"
# See`warp=plus` means success. For those who are ooold enough for Linux network management, try it for a global proxy mode, keep in mind that you have already back up or have second way or third way to save your remote VM's network!!!
CF_WARP="https://pkg.cloudflareclient.com/pubkey.gpg"
_WARP="deb https://pkg.cloudflareclient.com $(lsb_release -cs) main"
echo "$_WARP" | sudo tee /etc/apt/sources.list.d/cloudflare-warp.list > /dev/null
curl -fsSL "$CF_WARP" | sudo gpg --yes --dearmor --output /etc/apt/trusted.gpg.d/cloudflare-warp.gpg
sudo apt-get -qq update && sudo apt-get -qq install cloudflare-warp
GATEWAY=$(ip route show default | awk '/default/ {print $3}')
IFACE=$(ip route get 8.8.8.8 | sed -n 's/.*dev \([^\ ]*\).*/\1/p' | head -n 1)
_IPv4=$(ip addr show dev "$IFACE" | awk '/inet /{print $2}' | cut -d' ' -f2)
_IPv6=$(ip addr show dev "$IFACE" | awk '/inet6 /{print $2}' | cut -d' ' -f2)
# Setting for VPC ip structure
_VPC=$(curl -fsSL https://www.cloudflare.com/cdn-cgi/trace | grep 'ip' | sed 's/ip=//')
echo y | warp-cli registration new
# Setting for VPC internal
warp-cli add-excluded-route "$_IPv4"
warp-cli add-excluded-route "$_IPv6"
warp-cli add-excluded-route "$_VPC"
# Setting for external ssh
echo "$SSH_CONNECTION" | sed 's/ .*//' | sed 's/[0-9]*$/0\/24/' | xargs warp-cli add-excluded-route
warp-cli connect
# Whole network in WARP proxy, `warp=on` means success.
# Check `/var/log/cloudflare-warp/cfwarp_service_log.txt` for logs detailsPlz be aware that the VMs still has possibility to be lost due to the IP can still be changed after reboot!!!
DONT USE warp-cli tunnel ip add to exclude ip for now!!!
GATEWAY=$(ip route show default | awk '/default/ {print $3}')
IFACE=$(ip route get 8.8.8.8 | sed -n 's/.*dev \([^\ ]*\).*/\1/p' | head -n 1)
_IPv4=$(ip addr show dev "$IFACE" | awk '/inet /{print $2}' | cut -d' ' -f2 | sed 's/\([0-9.]*\)\/.*/\1/')
_IPv6=$(ip addr show dev "$IFACE" | awk '/inet6 /{print $2}' | cut -d' ' -f2 | sed 's/\([0-9.]*\)\/.*/\1/')
warp-cli tunnel ip add "$_IPv4"
warp-cli tunnel ip add "$_IPv6"
warp-cli tunnel ip add "$_VPC"
echo "$SSH_CONNECTION" | sed 's/ .*//' | sed 's/[0-9]*$/0\/24/' | sed 's/\([0-9.]*\)\/.*/\1/' | xargs warp-cli tunnel ip add- Go to
https://$TEAM.cloudflareaccess.com/warpand authenticate. - On the ‘Success’ page in the browser, right click and ‘Inspect’ the blue ‘Open Cloudflare WARP’ button. Copy the long url start with
com.cloudflare.warp://that’s shown linked to the button. - Assume you store it inside
$TOKEN_URL - Go to
one.dash.cloudflare.com - Find -> Setting -> WARP Client -> Device settings
- Click Default -> Configure -> Split Tunnels -> Manage, then add exclude IPs which is same as
warp-cli add-excluded-route
curl -fsSL https://pkg.cloudflareclient.com/pubkey.gpg \
| sudo gpg --yes --dearmor --output /etc/apt/trusted.gpg.d/cloudflare-warp.gpg
echo "deb https://pkg.cloudflareclient.com $(lsb_release -cs) main" \
| sudo tee /etc/apt/sources.list.d/cloudflare-warp.list > /dev/null
sudo apt-get -qq update && sudo apt-get -qq install cloudflare-warp
TOKEN_URL="com.cloudflare.warp://xxx.cloudflareaccess.com/auth?token=xxxxx"
echo y | warp-cli registration token $TOKEN_URL
warp-cli connect
curl -fsSL "https://www.cloudflare.com/cdn-cgi/trace"
curl --proxy socks5h://127.0.0.1:9011 https://www.cloudflare.com/cdn-cgi/trace
curl -x "socks5h://127.0.0.1:9091" -fsSL "https://www.cloudflare.com/cdn-cgi/trace"Debug commands for quick troubleshooting
docker rm -f $(docker ps -a -q) && docker rmi -f $(docker images -a -q)
docker run --privileged --restart=always -itd \
--name warp_debug \
--sysctl net.ipv6.conf.all.disable_ipv6=0 \
--sysctl net.ipv4.conf.all.src_valid_mark=1 \
--cap-add NET_ADMIN --cap-add SYS_MODULE \
-p 9091:9091 \
-v /lib/modules:/lib/modules \
monius/docker-warp-socks:meta
docker exec -it warp_debug /bin/bash
IFACE=$(ip route show default | grep default | awk '{print $5}')
IPv4=$(ifconfig "$IFACE" | awk '/inet /{print $2}' | cut -d' ' -f2)
IPv6=$(ifconfig "$IFACE" | awk '/inet6 /{print $2}' | cut -d' ' -f2)
TAR="https://api.github.com/repos/Mon-ius/Docker-Warp-Socks/releases/latest"
ARCH=$(dpkg --print-architecture)
URL=$(curl -fsSL ${TAR} | grep 'browser_download_url' | cut -d'"' -f4 | grep linux | grep "${ARCH}")
curl -LSs "${URL}" -o ./wgcf && chmod +x ./wgcf && mv ./wgcf /usr/bin
wgcf register --accept-tos && wgcf generate && mv wgcf-profile.conf /etc/wireguard/warp.conf
sed -i "/\[Interface\]/a PostDown = ip -6 rule delete from ${IPv6} lookup main" /etc/wireguard/warp.conf
sed -i "/\[Interface\]/a PostUp = ip -6 rule add from ${IPv6} lookup main" /etc/wireguard/warp.conf
sed -i "/\[Interface\]/a PostDown = ip -4 rule delete from ${IPv4} lookup main" /etc/wireguard/warp.conf
sed -i "/\[Interface\]/a PostUp = ip -4 rule add from ${IPv4} lookup main" /etc/wireguard/warp.conf
wg-quick up warp
curl "https://www.cloudflare.com/cdn-cgi/trace"
curl --interface eth0 "https://www.cloudflare.com/cdn-cgi/trace"
curl --interface warp "https://www.cloudflare.com/cdn-cgi/trace"
- CentOS/RedHat/Rocky Linux as Host, see https://github.com/uzairali001/docker-wireguard-rhel
- WireGuard
- Mon-ius/Docker-Warp-Socks
- Cloudflare WARP
- Neilpang/wgcf-docker
- Wireguard-Socks-Proxy
- WARP exlude config
We are not affiliated, associated, authorized, endorsed by, or in any way officially connected with Cloudflare, or any of its subsidiaries or its affiliates. The official Cloudflare website can be found at https://www.cloudflare.com.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent