Yeah the boundary nodes run icx-proxy. I believe it may have recently been open sourced, see this for details.
The real question is are the boundary nodes decentralized, i.e. managed by the NNS and thus upgradable via NNS proposals. And I think the answer is no… hoping to get more clarity on this here.