# Install obfs4proxy with Homebrew, apt

Pluggable transport proxy for Tor, implementing obfs4. Version 0.0.14 via Homebrew; verified from local package data.

## Install

```sh
sudo av install brew:obfs4proxy
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install obfs4proxy
```

  Evidence: local Homebrew formula metadata

### Linux

- Debian apt (92%):

```sh
sudo apt install obfs4proxy
```

  Evidence: Debian stable package indexes: obfs4proxy from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

## Package facts

- **Package key:** brew:obfs4proxy
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/obfs4proxy>
- **Version:** 0.0.14
- **Source summary:** Pluggable transport proxy for Tor, implementing obfs4
- **Homepage:** <https://gitlab.com/yawning/obfs4>
- **Repository:** <https://gitlab.com/yawning/obfs4>
- **Upstream docs:** <https://gitlab.com/yawning/obfs4/-/blob/master/README.md>
- **License:** BSD-2-Clause
- **Source archive:** <https://gitlab.com/yawning/obfs4/-/archive/obfs4proxy-0.0.14/obfs4-obfs4proxy-0.0.14.tar.gz>
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- obfs4proxy (cli)
- obfs4proxy (alias)

## Build dependencies

- go

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 0.0.14
- Local data: ok
- Upstream repository: https://gitlab.com/yawning/obfs4
- info: No package-manager update timestamp was available.
- info: Release/tag comparison is only available for GitHub repositories.
## Project history and usage

obfs4proxy is the executable from Yawning Angel's obfs4 project, a Go implementation of the obfs4 Tor pluggable transport. Its job is to transform Tor traffic between a censored client and a bridge so that network observers see obfuscated traffic rather than a recognizable Tor connection.

### Project history

The upstream README describes obfs4 as a "look-like nothing" obfuscation protocol that borrows concepts from Philipp Winter's ScrambleSuit while changing the handshake design. The protocol uses the Tor Project's ntor handshake with public keys obfuscated through Elligator 2, and the link layer uses NaCl secret boxes based on Poly1305 and XSalsa20.

The GitLab project record was created on 2019-01-16, but the protocol and proxy have older Tor ecosystem roots; Debian packaging and historical discussions predate that GitLab creation date. The executable kept compatibility paths for obfs2 and obfs3 client/server modes and ScrambleSuit client mode to ease migration while obfs4 became the main focus.

### Adoption history

Tor's bridge-operator documentation tells volunteers how to set up an obfs4 bridge for censored users and links platform-specific deployment guides across Linux distributions, BSD systems, Windows, and Docker. The same Tor page notes that the obfs4 project was renamed to lyrebird for source-building guidance, reflecting a handoff in anti-censorship transport maintenance while the `obfs4proxy` package name persists in distributions.

Debian packages obfs4proxy in the net section and describes it as compliant with the Tor pluggable transports specification, containing both client and bridge functionality in one program. Homebrew core packaged version 0.0.14 and recorded 532 installs over 365 days in the 2026-07-01 formula JSON.

### How it is used

Operators run obfs4proxy from Tor configuration using `ServerTransportPlugin obfs4 exec ...` on bridges and `ClientTransportPlugin obfs4 exec ...` on clients. The upstream README also documents generated bridge parameters in Tor's pluggable-transport state directory and suggests using Linux capabilities when a bridge needs to bind low-numbered ports without running as root.

The Tor pluggable transport specification explains the broader architecture that obfs4proxy implements: Tor launches modular subprocesses that transform traffic for censorship circumvention. In practice, obfs4proxy is the subprocess that speaks the obfs4 transport while Tor handles relay and bridge behavior around it.

### Why package nerds care

obfs4proxy is significant because it is not just another proxy binary; it is distribution-packaged anti-censorship infrastructure. Package managers make it easy for bridge operators and users to deploy the exact helper process Tor expects, while preserving a small single-executable interface around fairly specialized cryptographic and transport behavior.

### Timeline

- 2019-01-16: the GitLab project record for yawning/obfs4 was created.
- 2026-07-01: Homebrew core formula metadata listed stable version 0.0.14 and the `obfs4proxy` executable.
- 2026-07-01: Debian sid package metadata listed obfs4proxy 0.0.14-2 variants across multiple architectures.

### Related projects

- obfs4proxy belongs to Tor's pluggable-transport family and is related to older transports obfs2, obfs3, and ScrambleSuit, plus later Tor anti-censorship transports such as WebTunnel and Snowflake. The upstream project page and Tor bridge guide connect the historical obfs4 name with the lyrebird source project name used in newer Tor documentation.

### Sources

- <https://community.torproject.org/relay/setup/bridge/>
- <https://formulae.brew.sh/api/formula/obfs4proxy.json>
- <https://gitlab.com/api/v4/projects/yawning%2Fobfs4>
- <https://gitlab.com/yawning/obfs4>
- <https://packages.debian.org/unstable/net/obfs4proxy>
- <https://spec.torproject.org/pt-spec/index.html>


## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals

## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** obfs4proxy
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## Other Package-Manager Records

- Debian apt - obfs4proxy - 0.0.14-2+b5: normalized package name match | Debian stable package indexes: obfs4proxy from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | pluggable transport proxy for Tor, implementing obfs4 | https://gitlab.com/yawning/obfs4
- Ubuntu apt - obfs4proxy - 0.0.14-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: obfs4proxy from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | pluggable transport proxy for Tor, implementing obfs4 | https://gitlab.com/yawning/obfs4


## Related links

- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Language runtime packages](https://www.automicvault.com/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider.
- [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew.
- [geph4](https://www.automicvault.com/pkg/brew/geph4/) - Shares av.db curated category or tags: censorship-circumvention, cli, networking, privacy, proxy.
- [meek](https://www.automicvault.com/pkg/brew/meek/) - Shares av.db curated category or tags: censorship-circumvention, cli, networking, pluggable-transport, privacy.
- [torsocks](https://www.automicvault.com/pkg/brew/torsocks/) - Shares av.db curated category or tags: cli, networking, privacy, proxy, tor.
- [dnscrypt-proxy](https://www.automicvault.com/pkg/brew/dnscrypt-proxy/) - Shares av.db curated category or tags: cli, networking, privacy, proxy.
- [dsocks](https://www.automicvault.com/pkg/brew/dsocks/) - Shares av.db curated category or tags: cli, networking, proxy, tor.
- [glider](https://www.automicvault.com/pkg/brew/glider/) - Shares av.db curated category or tags: cli, go, networking, proxy.
- [gost](https://www.automicvault.com/pkg/brew/gost/) - Shares av.db curated category or tags: cli, go, networking, proxy.
- [mihomo](https://www.automicvault.com/pkg/brew/mihomo/) - Shares av.db curated category or tags: cli, go, networking, proxy.
- [snowflake](https://www.automicvault.com/pkg/brew/snowflake/) - Local package facts share a topical domain. Shared terms: censorship, censorship-circumvention, circumvention, cli, networking.
- [sstp-client](https://www.automicvault.com/pkg/brew/sstp-client/) - Local package facts share a topical domain. Shared terms: cli, networking.

## Combined YAML source

View the package source record on GitHub. [combined/obfs4proxy.yml](https://github.com/automic-vault/db/blob/main/combined/obfs4proxy.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
