What is go-socksd?
=================
Go-socksd is a SOCKS5 proxy server written in Go_ and designed for
maximal concurrency.  It is expected to scale well on a modern
multi-processor box. It runs on any platform that is supported
by Go (golang.org).

The server supports a simple JSON config file for its configuration.


Major features
==============
- No authentication (yes, its a feature)
- flexible allow/deny rules for discriminating clients
- multiple listeners - each with their own ACL
- Rate limiting incoming connections (per listening IP)

Access Control Rules
====================
Go-socksd implements a flexible ACL by combination of
allow/deny rules. The rules are evaluated in the following order:

- If explicitly denied, the host is blocked
- If explicitly allowed, the host is allowed
- Explicit denial takes precedence over explicit allow
- Empty allow list is the same as "allow all"

Example of allow/deny combinations
----------------------------------

1. Only allow specific subnets and deny everyone else:

    "allow": [ "192.168.55.0/24", "172.16.10.0/24", "127.0.0.1/8" ],
    "deny": []


2. Allow all except selected subnets:

    "allow": [],
    "deny": [ "192.168.80.0/24", "172.16.5.0/24" ]


3. Expliclty block certain hosts and explicitly allow certain
   subnets and block everyone else:

    "allow": [ "192.168.55.0/24", "172.16.10.0/24", "127.0.0.1/8" ],
    "deny":  [ "192.168.1.1/32", "192.168.80.0/24", "172.16.5.0/24" ]

--
Tue Nov  6 19:58:38 CST 2007