Home
What is go-socksd? ================= Go-socksd is a SOCKS5 proxy server written in Go and designed for maximal concurrency. It is expected to scale well on a modern multi-processor box. It runs on any platform that is supported by Go (golang.org).
The server supports a simple JSON config file for its configuration.
- No authentication (yes, its a feature)
- flexible allow/deny rules for discriminating clients
- multiple listeners - each with their own ACL
- Rate limiting incoming connections (per listening IP)
Go-socksd implements a flexible ACL by combination of allow/deny rules. The rules are evaluated in the following order:
- If explicitly denied, the host is blocked
- If explicitly allowed, the host is allowed
- Explicit denial takes precedence over explicit allow
- Empty allow list is the same as "allow all"
-
Only allow specific subnets and deny everyone else:
"allow": [ "192.168.55.0/24", "172.16.10.0/24", "127.0.0.1/8" ], "deny": []
-
Allow all except selected subnets:
"allow": [], "deny": [ "192.168.80.0/24", "172.16.5.0/24" ]
-
Expliclty block certain hosts and explicitly allow certain subnets and block everyone else:
"allow": [ "192.168.55.0/24", "172.16.10.0/24", "127.0.0.1/8" ], "deny": [ "192.168.1.1/32", "192.168.80.0/24", "172.16.5.0/24" ]