tangentsoft/tinyproxy repository overview

This is a single statically-linked binary of Tinyproxy, an uncommonly slim HTTP proxy server. It can only provide TLS support when operating as a transparent forward proxy, not as a reverse proxy, but you may couple it with a tool like stunnel or socat to provide TLS encryption atop this.

It's tiny because there is only one executable inside this container; there isn't an "OS," not even a shell. This makes the container as secure as possible, having no greater attack surface than the service binary itself. If anyone ever does work out a way to exploit Tinyproxy, running it this way leaves the attacker without any additional tools to extend their reach.

Full details about the project are here⁠, including the Dockerfile and the Makefile used to build this container, plus instructions on getting it running under RouterOS 7, the initial testing target. It's since been tested under Docker and Podman, but given the bare-bones nature of the RouterOS container engine, this should run under any other sane engine.