Good Old SOCKS5: Why It Finally Needed TLS After Three Decades
How ProxiFyre protects SOCKS5 authentication and TCP traffic with TLS, why UDP relay traffic remains separate, and how Alighieri provides a matching TLS listener.
Engineering notes, deep dives, implementation stories, and practical articles on Windows networking, packet filtering, proxies, VPNs, and related systems work.
How ProxiFyre protects SOCKS5 authentication and TCP traffic with TLS, why UDP relay traffic remains separate, and how Alighieri provides a matching TLS listener.
A historical WireSock experiment routing Cloudflare WARP through a US Dante SOCKS5 proxy, with checks for tunnel routing and Netflix playback.
Configure a restricted Dante SOCKS5 UDP relay on Ubuntu 24.04 for one Cloudflare WARP WireGuard endpoint, including firewall and relay-address checks.
ProxiFyre 2.0.1 introduced deferred process lookup and a catch-all SOCKS5 rule. This release analysis explains its IPv4, DNS and proxy-carrier limits.
The original Egyptian WireGuard handshake-relay experiment, its SOCKS5 configuration and the later limits of handshake-only proxying.
Set up a restricted Dante SOCKS5 proxy on an Oracle Cloud Ubuntu instance and test TCP and UDP relay paths separately.