Concepts / Firewalls

Firewalls

SOCKS proxy

Also called SOCKS5, Dante, circuit-level gateway, socks5h

A circuit-level gateway: it opens any TCP connection a client asks for and relays the bytes unread.

The client names a host and port; the proxy connects and copies data both ways. It decides by who asks and where to, never by content, so it carries any protocol (ssh, chat, HTTP) and can judge none of them. With socks5h (curl's --socks5-hostname) the proxy also does the name lookup.

See it on real machines

Learn it on real machines.

Every lab is a small network of real Linux machines in your browser. Start with a free account: Google or email, no card.

Open this lab