Support for Socks/Http Proxy?

[GammaPi]

Since synapse is in it's early stage, a built-in proxy support (no matter it's socks or http) is necessary to keep the server safe from attackers.

#1234 related
element-hq/riot-android#1234

[GammaPi]

It seems that riot-android(the old app) use matrix-android-sdk to communicate with matrix server. And matrix-android-sdk uses okhttp3 to send http request. Am I correct on this?

https://github.com/matrix-org/matrix-android-sdk/search?q=import+okhttp3.OkHttpClient%3B&unscoped_q=import+okhttp3.OkHttpClient%3B

I'm wondering if I can configure proxy for okhttpclient in matrix-sdk/src/main/java/org/matrix/androidsdk/RestClient.java and then do some UI adjustments to solve this issue?

I'm looking for proxy support because it seems that Synapse (the only availabe option for Matrix home server) is still in its early stage and it may have some security vulnerbilities (Is my concern right?). Though restricting outer access to matrix home server may limit federation, this can be solved by using firewall whiltelist policy and only allow trusted federation server to access local server. Normal users have to access the server through proxy.

Since riot.im desktop apps use electronic. I can enable proxy simply by setting cmd arg "--proxy-server". For android apps, solutions like tun2socks or system-wide proxy do work, but users have to open proxy all the time which is not very decent. If riot android have a built-in proxy, then it would be a lot easier.

[dklimpel]

See also: matrix-org/matrix-android-sdk#519

SOCKS support would pair well with Orbot. Orbot does support a VPN mode, but that's not a great solution for some configurations.

[GammaPi]

Looking forward to this

[JJohnGreenSr]

I feel the same, Gamma

[reg3xp]

SOCKS5 would be great

[seth586]

yeah as an experiment I set up a onion_address:443 routed to my syanpse_server:8008, but the clients just dont seem to want to resolve onion addresses.

Adding a simple SOCKS5 proxy to pair with orbot would be a good first step in bringing anonymity to the matrix protocol!

[cm157]

Please add socks5 / Orbot support so can access synapse server running as hidden service

[CalunVier]

Although we have many alternatives, the built-in proxy function can make our access to martix more convenient. As we all know, not all parts of the world can easily connect with the outside world.