Skip to main content

eggress Python bindings

Python bindings for the eggress proxy framework, powered by PyO3 and the Rust embed API.

Installation (local development)

pip install maturin
cd crates/eggress-python
rm -f ../../target/wheels/eggress-*.whl   # stale wheels break the install glob below
maturin build --target x86_64-apple-darwin   # adjust target for your platform
pip install --force-reinstall target/wheels/eggress-*.whl

Prebuilt wheels

Prebuilt wheels are published to PyPI for:

  • Linux x86_64 and aarch64 (manylinux)
  • macOS x86_64 and arm64
  • Windows x86_64

The wheel uses the Python stable ABI (abi3-py39), so one wheel per platform supports all declared Python versions (3.9–3.13). Other platforms can install from the source distribution (requires Rust toolchain).

Supported Python versions: 3.9, 3.10, 3.11, 3.12, 3.13.

Quick start

from eggress import EggressService

with EggressService.from_toml("""
    version = 1
    [[listeners]]
    name = "socks"
    bind = "127.0.0.1:0"
    protocols = ["socks5"]
""").start() as handle:
    addr = handle.bound_addresses["socks"]
    print(f"SOCKS5 listening on {addr}")
    print(handle.metrics_text())

Async usage

import asyncio
from eggress import EggressService

async def main():
    async with await EggressService.from_toml(TOML).astart() as handle:
        print("Listening on", await handle.bound_addresses)

asyncio.run(main())

API

  • EggressConfig.from_toml(toml) / EggressConfig.from_file(path) — parse config
  • EggressService(config) / EggressService.from_toml(toml) — create service
  • service.start() — start proxy, returns EggressHandle
  • handle.bound_addresses — dict of listener name -> address
  • handle.status() — generation, readiness, uptime, connections
  • handle.metrics_text() — Prometheus metrics
  • handle.reload_toml(toml) — hot-reload config
  • handle.shutdown() — graceful shutdown (idempotent; safe to call twice)
  • Context manager support: with service.start() as handle: ...

Always use explicit lifecycle management. Prefer context managers or explicit handle.shutdown() in a finally block. Do not rely on Python garbage collection to shut down the service — object destruction is a best-effort fallback, not the lifecycle API.

pproxy Compatibility

Eggress provides a pproxy compatibility surface validated against pproxy==2.7.9 and bounded by the canonical capability manifest. Legacy cipher implementations and unsupported native transports fail explicitly rather than being silently substituted:

  • URI Translation: translate_pproxy_args() converts pproxy CLI arguments to eggress TOML
  • Same Protocols: HTTP, SOCKS4/4a, SOCKS5, Shadowsocks (AEAD), Trojan
  • Same Schedulers: Round-robin, least-connections, first-available
  • Enhanced Features: Hot-reload, structured errors, context managers

See docs/python/PPROXY_EMBEDDED_USAGE_PATTERNS.md for migration guidance.

pproxy drop-in API

from eggress import PPProxyService, start_pproxy, check_pproxy_args

# Check compatibility before starting
report = check_pproxy_args(["-l", "socks5://:1080", "-r", "http://proxy:8080"])
print(f"Tier: {report.tier}, OK: {report.ok}")

# Start from pproxy args
with start_pproxy(["-l", "socks5://127.0.0.1:0"]) as handle:
    print(handle.bound_addresses)

# Start from local URI
with PPProxyService.from_uri("socks5://127.0.0.1:0") as handle:
    print(handle.bound_addresses)

# Start from TOML
with PPProxyService.from_toml(toml_str) as handle:
    print(handle.bound_addresses)

The optional eggress-pproxy-compat distribution additionally provides python -m pproxy, a pproxy console script, and the top-level pproxy package backed by the same compatibility entry point. pproxy.server helper calls reuse the existing protocol/proxy adapters, while pproxy.sysproxy delegates system-proxy apply/rollback to the native backend where the platform supports it. See the namespace strategy below before installing it.

API Contract (Phase C1)

A machine-readable contract of the bounded pproxy adapter is maintained at python/compat/pproxy_api_contract.json. The exact upstream installed-package inventory is maintained separately in compat/pproxy-2.7.9/namespace-baseline.json and the active parity manifest. Use scripts/pproxy_surface_probe.py with isolated oracle and wheel interpreters to compare module names, top-level exports, tracked signatures, async classification, and class bases. Importability is not a claim that private pproxy internals are functionally reproduced.

Classification summary

Tier Count Examples
adapted_target 3 Connection, Server, Rule → PPProxyService
intentional_non_parity 1 DIRECT sentinel
internal_observed 87 Protocol classes, cipher classes, server internals

Validation

# Regenerate the contract
python3.11 python/compat/extract_api.py

# Run 56 contract validation tests
python3.11 -m pytest tests/compat/test_pproxy_api_contract.py -v

# Run 46 behavioral probes
python3.11 python/compat/behavioral_probes.py

Namespace strategy

The optional eggress-pproxy-compat distribution installs a bounded top-level pproxy package containing the documented connection/server factories and protocol/cipher submodules. The canonical eggress distribution retains eggress.pproxy and eggress.start_pproxy() for translation and managed-service workflows. Do not install the compatibility distribution alongside upstream pproxy in the same environment. See docs/python/PPROXY_NAMESPACE_STRATEGY.md for the compatibility boundary.

Migrating from pproxy

from eggress import start_pproxy

# Same arguments you'd pass to pproxy
with start_pproxy(["-l", "socks5://:1080", "-r", "http://proxy:8080"]) as handle:
    print(handle.bound_addresses)

Or inspect the translation first:

from eggress import translate_pproxy_args

result = translate_pproxy_args(["-l", "socks5://:1080", "-r", "http://proxy:8080"])
print(result.toml)         # generated eggress TOML
print(result.warnings)     # partial-behavior notes
print(result.unsupported)  # unsupported features

Error model

Exception Meaning
EggressError Base exception
ConfigError TOML parsing or validation error
StartupError Listener bind or readiness timeout
ReloadError Config reload failure
ShutdownError Runtime shutdown error
UnsupportedFeatureError Feature not supported
InternalError Unexpected internal error

Limitations

  • GIL is released for blocking Rust calls
  • Requires Python >= 3.9
  • Listener bind changes require restart (not reloadable)
  • No logging initialization unless configured in TOML

Non-parity with pproxy

  • Shadowsocks TCP uses standard SIP003 AEAD framing (wire-compatible with shadowsocks-rust/ssserver/sslocal); single-hop upstream only
  • No inbound Shadowsocks or Trojan listeners (upstream-only) — inbound Shadowsocks listener is available in the Rust binary; Python bindings expose the embed API which omits this for now
  • No legacy stream ciphers (aes-ctr, aes-cfb, rc4-md5, etc.)
  • No SSH, Unix socket, or transparent proxy (redir) transport
  • No pproxy daemon mode (--daemon)
  • No -ul/-ur standalone UDP relay (uses SOCKS5 UDP ASSOCIATE)
  • Multiple remotes default to round-robin (matches pproxy behavior)
  • Direct fallback requires explicit config

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

eggress-1.0.5.tar.gz (1.0 MB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

eggress-1.0.5-cp39-abi3-win_amd64.whl (5.6 MB view details)

Uploaded CPython 3.9+Windows x86-64

eggress-1.0.5-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (5.5 MB view details)

Uploaded CPython 3.9+manylinux: glibc 2.17+ x86-64

eggress-1.0.5-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (5.2 MB view details)

Uploaded CPython 3.9+manylinux: glibc 2.17+ ARM64

eggress-1.0.5-cp39-abi3-macosx_11_0_arm64.whl (5.0 MB view details)

Uploaded CPython 3.9+macOS 11.0+ ARM64

eggress-1.0.5-cp39-abi3-macosx_10_12_x86_64.whl (5.3 MB view details)

Uploaded CPython 3.9+macOS 10.12+ x86-64

File details

Details for the file eggress-1.0.5.tar.gz.

File metadata

  • Download URL: eggress-1.0.5.tar.gz
  • Upload date:
  • Size: 1.0 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for eggress-1.0.5.tar.gz
Algorithm Hash digest
SHA256 0c5766498684ea4f057a2bd508d8322117a3ccbbac76201c7193368cf201f565
MD5 f586bb026e87c3f63c263721bae1b266
BLAKE2b-256 2c0c44e6b75fd73e6578e79b2ab777858edf24c5b1d3ff38dc1b328585de5d91

See more details on using hashes here.

Provenance

The following attestation bundles were made for eggress-1.0.5.tar.gz:

Publisher: publish-python.yml on eggstack/eggress

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file eggress-1.0.5-cp39-abi3-win_amd64.whl.

File metadata

  • Download URL: eggress-1.0.5-cp39-abi3-win_amd64.whl
  • Upload date:
  • Size: 5.6 MB
  • Tags: CPython 3.9+, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for eggress-1.0.5-cp39-abi3-win_amd64.whl
Algorithm Hash digest
SHA256 47e74071a01ff7baae4db89dc86b27d455c18f72a6bba1c3aa9865f7ef1c1b2b
MD5 3f17375c55ddc11eafab7095ef7dc27e
BLAKE2b-256 da9c267f9abd9c6a5b1f3279e84e6965d2f846e560f81d1816c31299e3185552

See more details on using hashes here.

Provenance

The following attestation bundles were made for eggress-1.0.5-cp39-abi3-win_amd64.whl:

Publisher: publish-python.yml on eggstack/eggress

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file eggress-1.0.5-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for eggress-1.0.5-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 0dd9c731e1f0503861216b727b7be9442e987b31edcd59b0f1d6183365932340
MD5 ce7561387ee8372215caaa745d3f2f80
BLAKE2b-256 18f0f9169dbc2f419185026b1e6b70759355633f473064f8911a9741389b0fee

See more details on using hashes here.

Provenance

The following attestation bundles were made for eggress-1.0.5-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl:

Publisher: publish-python.yml on eggstack/eggress

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file eggress-1.0.5-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl.

File metadata

File hashes

Hashes for eggress-1.0.5-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
Algorithm Hash digest
SHA256 d05b59ac956190617639edf2ebb51e4019f94bb738e506b1ef8345188d6c3f27
MD5 07de337d2a62514f10e0c0485fdee626
BLAKE2b-256 1fc7758a435737eb7ce4782096341cc38bd8b11a1e95dd7df6af5e1f2eb6d94b

See more details on using hashes here.

Provenance

The following attestation bundles were made for eggress-1.0.5-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl:

Publisher: publish-python.yml on eggstack/eggress

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file eggress-1.0.5-cp39-abi3-macosx_11_0_arm64.whl.

File metadata

File hashes

Hashes for eggress-1.0.5-cp39-abi3-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 739b15f230ff49efb2f1c472e177d4d83caad64e48a4b11622b1ad2bd007b66d
MD5 64b5b5a9ebdb3bd48a84cfdfd0216b5e
BLAKE2b-256 7d71eede4ea00f9df71416f4cafa91944027f9912a98e916444e84f661b37aa8

See more details on using hashes here.

Provenance

The following attestation bundles were made for eggress-1.0.5-cp39-abi3-macosx_11_0_arm64.whl:

Publisher: publish-python.yml on eggstack/eggress

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file eggress-1.0.5-cp39-abi3-macosx_10_12_x86_64.whl.

File metadata

File hashes

Hashes for eggress-1.0.5-cp39-abi3-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 f7371a38001173c174dcc5330a57025a407eca2d2ea3553d5d9de56763e888ec
MD5 6caa48d323638eeadf34897f01c4dbc4
BLAKE2b-256 9215f945d75414c32cde28677bb22f5e4353793d02fdf7e7b18f1ea033d1861b

See more details on using hashes here.

Provenance

The following attestation bundles were made for eggress-1.0.5-cp39-abi3-macosx_10_12_x86_64.whl:

Publisher: publish-python.yml on eggstack/eggress

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

1.0.6

6 files

This release

1.0.5 This release

6 files

1.0.4

6 files

1.0.1

1 file

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page