View on GitHub


a generic RADIUS proxy with RadSec support

v1.10.1 Download this project as a tar.gz file

radsecproxy is a generic RADIUS proxy that in addition to usual RADIUS UDP transport, also supports TLS (RadSec), as well as RADIUS over TCP and DTLS. The aim is for the proxy to have sufficient features to be flexible, while at the same time to be small, efficient and easy to configure.

The proxy was initially made to be able to deploy RadSec (RADIUS over TLS) so that all RADIUS communication across network links could be done using TLS, without modifying existing RADIUS software. This can be done by running this proxy on the same host as an existing RADIUS server or client, and configure the existing client/server to talk to localhost (the proxy) rather than other clients and servers directly.

There are however other situations where a RADIUS proxy might be useful. Some people deploy RADIUS topologies where they want to route RADIUS messages to the right server. The nodes that do purely routing could be using a proxy. Some people may also wish to deploy a proxy on a site boundary. Since the proxy supports both IPv4 and IPv6, it could also be used to allow communication in cases where some RADIUS nodes use only IPv4 and some only IPv6.

Security Advisories

Seurity advisories are published on github

Latest release

The latest release of radsecproxy is version v1.10.1, signature

Official packages are available:

For development releases or older versions, visit the github page


For documentation, consult the manpages: radsecproxy(8) radsecproxy.conf(5) radsecproxy-hash(8)


Please report issues, request features etc on the github page

There is also the old mailing list: (note: the mailing list will remain operational for now)


Radsecproxy was written by Stig Venaas.

Radsecproxy is currently being maintained by Fabian Mauchle

PGP Key: 210FA7FB28E45779777BAA1C5963D59C3D68633B