Docker-Warp-Socks

A lightweight Alpine Linux based Docker image, designed for easy connection to CloudFlare WARP, exposing socks5 proxy all together.

Multi-platform: linux/arm, linux/arm64, linux/amd64, linux/ppc64le, linux/s390x and linux/riscv64

---

Usage

Quick Start

The default image uses v8. Use the :v8 tag to select this generation explicitly.

docker run --restart=always -itd \
    --name warp-socks \
    -p 9091:9091 \
    ghcr.io/mon-ius/docker-warp-socks

Docker Compose

Build and run v8 from this repository:

docker compose -f dev/v8/compose.yaml up -d --build

The Compose file supports NET_PORT (default 9091), SOCK_USER and SOCK_PWD (set both to enable authentication), and WARP_API, WARP_SERVER, and WARP_PORT overrides. Its health check verifies warp=on through the proxy and uses the configured credentials.

Set LOG_LEVEL=debug for detailed connection diagnostics in the container logs.

To use a published image, run docker compose up -d with the following compose.yaml:

services:
    warp-socks:
        image: ghcr.io/mon-ius/docker-warp-socks:v8
        container_name: warp-socks
        restart: always
        ports:
            - "9091:9091"
        healthcheck:
            test: ["CMD", "curl", "-x", "socks5h://127.0.0.1:9091", "-fsSL", "https://www.cloudflare.com/cdn-cgi/trace"]
            interval: 30s
            timeout: 10s
            retries: 5
            start_period: 10s

Note

Verify the success, if warp=on shown with curl

curl -x "socks5h://127.0.0.1:9091" -fsSL "https://www.cloudflare.com/cdn-cgi/trace"
curl -x "http://127.0.0.1:9091" -fsSL "https://www.cloudflare.com/cdn-cgi/trace"

Features

V8

• Provides HTTP and SOCKS5 proxies on port 9091, with optional username and password authentication.
• Runs without privileged mode, extra network capabilities, or host kernel modules.
• Keeps private-network traffic local while sending other traffic through Cloudflare WARP.
• Registers with Cloudflare automatically during startup.
• Supports credentials containing special characters and keeps private keys and passwords out of startup logs.
• Includes a Compose file with an authenticated proxy health check and builds for amd64, arm64, arm/v7, ppc64le, s390x, and riscv64 on Alpine 3.24.

AI API examples

Current model examples for API clients using this HTTP/SOCKS5 proxy, checked against official provider documentation on 2026-10-08:

Provider	Current models
Google	Gemini 3.8 Flash, Gemini 3.5 Flash-Lite
OpenAI	GPT-6.1 Sol, GPT-6 Astra, GPT-6 Luna
Grok	Grok 4.7
Anthropic	Claude Opus 5.5, Claude Sonnet 5.5, Claude Haiku 5.5, Claude Fable 5.1
DeepSeek	DeepSeek V4.1 Flash, DeepSeek V4 Pro
Moonshot / Kimi Code	Kimi K3, Kimi K2.8 Preview, Kimi K2.7 Code HighSpeed
MiniMax	MiniMax M3, MiniMax M2.7, MiniMax M2.7 Highspeed

Source

• GitHub
• DockerHub

Credits

• WireGuard
• Mon-ius/Docker-Warp-Socks
• Cloudflare WARP
• SagerNet/sing-box
• ViRb3/wgcf
• Neilpang/wgcf-docker
• Wireguard-Socks-Proxy
• WARP exlude config

Notice of Non-Affiliation and Disclaimer

We are not affiliated, associated, authorized, endorsed by, or in any way officially connected with Cloudflare, or any of its subsidiaries or its affiliates. The official Cloudflare website can be found at https://www.cloudflare.com.