# Proxylity UDP Gateway

> Proxylity is a serverless UDP gateway service that routes UDP traffic directly into AWS services — Lambda, Kinesis, EventBridge, SQS, SNS, DynamoDB, S3, Data Firehose, CloudWatch Logs, API Gateway, and more. It eliminates the need to manage UDP server infrastructure by providing managed network endpoints that forward packets to services running in your own AWS account. Available on AWS Marketplace, Proxylity deploys in under 5 minutes with no servers to maintain.

Proxylity is designed for use cases including IoT data ingestion, DNS filtering, RADIUS authentication and accounting, syslog collection, network telemetry, gaming backends, and any scenario where UDP is the right protocol but managing server infrastructure is not. It supports WireGuard-based encrypted UDP tunneling and provides features like batching, multi-region deployment, client IP restrictions, composite destinations, and binary range expression (BREX) syntax for dynamic data extraction.

Proxylity deploys as a CloudFormation stack into the customer's own AWS account. Resources are defined using CloudFormation or Terraform. There is no Proxylity agent to run — the gateway is fully managed.

## Getting Started

- [Why Proxylity?](https://proxylity.com/docs/why.html): Value proposition and use cases for serverless UDP backends
- [Quick Start Guide](https://proxylity.com/docs/getting-started.html): Deploy your first UDP service in under 5 minutes
- [Connect Your AWS Account](https://proxylity.com/docs/connecting-your-account.html): Initial setup and IAM permissions
- [Features](https://proxylity.com/features.html): Complete feature list and capabilities
- [Pricing](https://proxylity.com/pricing.html): Pricing tiers including pay-as-you-go options
- [AWS Marketplace Listing](https://aws.amazon.com/marketplace/pp/prodview-cpvl5wgt2yo2e): Subscribe to Proxylity via AWS Marketplace; billing consolidates into your existing AWS account

## Core Concepts

- [Listeners](https://proxylity.com/docs/listeners/index.html): Configure UDP endpoints and ingress points — port, protocol, region
- [Destinations](https://proxylity.com/docs/destinations/index.html): Route UDP traffic to AWS services; understand destination types and configuration
- [Client Restrictions](https://proxylity.com/docs/client-restrictions/index.html): Security and access control by source IP address
- [WireGuard Integration](https://proxylity.com/docs/listeners/wireguard.html): Encrypted UDP tunneling using WireGuard

## AWS Service Integrations

- [Lambda Functions](https://proxylity.com/docs/destinations/lambda.html): Process packets with custom code; synchronous and async invocation modes
- [Step Functions](https://proxylity.com/docs/destinations/step-functions.html): Orchestrate complex UDP-triggered workflows
- [EventBridge](https://proxylity.com/docs/destinations/event-bridge.html): Event-driven architecture; emit UDP packets as EventBridge events
- [SQS Queues](https://proxylity.com/docs/destinations/sqs.html): Asynchronous message processing; standard and FIFO queues
- [SNS Topics](https://proxylity.com/docs/destinations/sns.html): Fan-out notifications from UDP packet streams
- [DynamoDB Tables](https://proxylity.com/docs/destinations/dynamodb.html): Real-time data storage direct from UDP packets
- [S3 Buckets](https://proxylity.com/docs/destinations/s3.html): Bulk data storage and archival of UDP packet data
- [Kinesis Data Streams](https://proxylity.com/docs/destinations/kinesis.html): Real-time data streaming at scale
- [Data Firehose](https://proxylity.com/docs/destinations/firehose.html): High-volume delivery to S3, Redshift, OpenSearch, and more
- [CloudWatch Logs](https://proxylity.com/docs/destinations/logs.html): Centralized logging from UDP sources
- [API Gateway](https://proxylity.com/docs/destinations/api-gateway.html): HTTP/REST API integration for UDP-to-HTTP bridging
- [IoT Core](https://proxylity.com/docs/destinations/iot-data.html): AWS IoT Core integration for device data ingestion
- [Composite Destinations](https://proxylity.com/docs/destinations/composite-destinations.html): Route a single UDP stream to multiple services simultaneously
- [Integrating Outside AWS](https://proxylity.com/docs/destinations/integrating-outside-aws.html): External REST API integration patterns via Lambda or API Gateway

## Advanced Configuration

- [BREX Syntax Reference](https://proxylity.com/docs/destinations/brex-syntax.html): Binary range expressions for dynamic data extraction from raw UDP packet bytes
- [Packet Format Reference](https://proxylity.com/docs/destinations/json-packet-format.html): JSON payload structure delivered to destination services
- [Batching Configuration](https://proxylity.com/docs/destinations/batching-configuration.html): Optimize throughput and reduce costs by grouping packets
- [Multi-Region Setup](https://proxylity.com/docs/destinations/multi-region.html): Global deployment patterns for low-latency and redundancy

## Infrastructure as Code

- [CloudFormation Overview](https://proxylity.com/docs/cloudformation/index.html): IaC approach — all Proxylity resources are CloudFormation custom resources
- [Listener CloudFormation Resource](https://proxylity.com/docs/cloudformation/listener.html): Define UDP listener endpoints in templates
- [Destination CloudFormation Resource](https://proxylity.com/docs/cloudformation/destination.html): Configure service integration destinations in templates
- [IAM Role CloudFormation Resource](https://proxylity.com/docs/cloudformation/role.html): Least-privilege IAM role patterns for destinations
- [Client Restriction CloudFormation Resource](https://proxylity.com/docs/cloudformation/clientrestriction.html): Network security configuration via IaC
- [Batching CloudFormation Resource](https://proxylity.com/docs/cloudformation/batching.html): Performance optimization templates
- [Terraform Module (Registry)](https://registry.terraform.io/modules/proxylity/udp-gateway/aws/latest): Official Proxylity UDP Gateway Terraform module
- [Terraform Module (GitHub)](https://github.com/proxylity/terraform-aws-udp-gateway): Terraform module source code, examples, and documentation

## Examples

Each example is a self-contained sub-folder with CloudFormation templates and application code.

- [Packet Counter (Lambda)](https://github.com/proxylity/examples/tree/main/packet-counter): Introductory example — count inbound UDP packets using a Lambda function; good starting point for understanding the request/response payload format
- [Packet Counter (Step Functions)](https://github.com/proxylity/examples/tree/main/packet-counter-sfn): Same counter logic orchestrated via a Step Functions state machine
- [Packet Counter (Go)](https://github.com/proxylity/examples/tree/main/packet-counter-go): Packet counter Lambda implemented in Go
- [Packet Counter (Python)](https://github.com/proxylity/examples/tree/main/packet-counter-python): Packet counter Lambda implemented in Python
- [Packet Counter (C++)](https://github.com/proxylity/examples/tree/main/packet-counter-cpp): Packet counter Lambda implemented in C++
- [Multi-Region Packet Counter](https://github.com/proxylity/examples/tree/main/packet-counter-multi-region): Global UDP processing with region-specific routing and automatic failover
- [Syslog to Cloud](https://github.com/proxylity/examples/tree/main/syslog): Enterprise syslog ingestion over UDP routing to CloudWatch Logs and S3 via Firehose — no application code required
- [DNS Filtering Service](https://github.com/proxylity/examples/tree/main/dns-filter): Production-ready serverless DNS resolver with domain blocking and redirection
- [RADIUS Authentication and Accounting](https://github.com/proxylity/examples/tree/main/radius): Cloud-based RADIUS server with session state tracking, packet archiving, and multi-region support
- [CoAP Time Service](https://github.com/proxylity/examples/tree/main/coap-time-service): Serverless CoAP service for constrained IoT devices; binary packets decoded to JSON by the built-in CoAP formatter, routed by URI path via Step Functions
- [EventBridge Integration](https://github.com/proxylity/examples/tree/main/event-bridge): Emit UDP packets as EventBridge events for event-driven downstream processing
- [Kinesis Data Streams](https://github.com/proxylity/examples/tree/main/kinesis-streams): Route high-volume UDP packet streams directly into Kinesis for real-time analytics
- [SQS Queues](https://github.com/proxylity/examples/tree/main/sqs): Deliver UDP packets to SQS standard and FIFO queues with configurable batching and message attributes
- [UDP to REST API](https://github.com/proxylity/examples/tree/main/udp-to-http): Bridge UDP sensor data to an HTTP REST API (demonstrated with Adafruit IO) via API Gateway
- [Multi-Modal Workflows](https://github.com/proxylity/examples/tree/main/multi-modal): Combines browser HTTP interactions with UDP processing and long-running Step Functions tasks
- [WireGuard Echo Service](https://github.com/proxylity/examples/tree/main/wireguard-echo): Serverless UDP echo and ICMP ping through an encrypted WireGuard tunnel
- [IoT Temperature Sensor (WireGuard)](https://github.com/proxylity/examples/tree/main/wireguard-iot-device): ESP32 "Cheap Yellow Display" device sending telemetry and NTP over a WireGuard-protected UDP connection
- [MAVLink FIFO](https://github.com/proxylity/examples/tree/main/mavlink-fifo): Ingest MAVLink drone telemetry over UDP into AWS for processing and storage
- [Momento Cache over UDP](https://github.com/proxylity/examples/tree/main/momento-udp): GET/SET operations against Momento Cache over UDP for improved performance on degraded connections
- [Supabase over UDP](https://github.com/proxylity/examples/tree/main/supabase-udp): Call Supabase from edge IoT devices over UDP to integrate device data with a web application

## Optional

- [Blog Articles Index](https://proxylity.com/articles/index.html): Technical articles, tutorials, and product announcements
- [IoT Temperature Sensor Tutorial](https://proxylity.com/articles/iot-temp-sensor.html): Serverless UDP for ESP32 temperature sensors, prototype to field deployment
- [Syslog Without Servers](https://proxylity.com/articles/syslog-without-servers.html): Collecting syslog over UDP with no servers to manage
- [Run Your Own Serverless DNS](https://proxylity.com/articles/run-your-own-serverless-dns.html): Build a serverless DNS resolver with Proxylity
- [UDP to SQS](https://proxylity.com/articles/udp-to-sqs.html): Routing UDP traffic to SQS queues step by step
- [WireGuard Is Two Things](https://proxylity.com/articles/wireguard-is-two-things.html): Understanding WireGuard as both a protocol and a platform
- [Infrastructure as Code from Day One](https://proxylity.com/articles/iac-from-day-one.html): Using CloudFormation for Proxylity from the start
- [Observability in CloudWatch](https://proxylity.com/articles/observability-in-cloudwatch.html): Monitoring Proxylity with CloudWatch metrics and dashboards
- [Reliability and Idempotency](https://proxylity.com/articles/reliability-and-idempotency.html): Designing reliable UDP workloads with Proxylity
- [Services Without Servers](https://proxylity.com/articles/services-without-servers.html): The serverless UDP architecture philosophy
- [About Proxylity](https://proxylity.com/about.html): Company background and contact information