On 9/2/21 11:41 PM, hongy...@gmail.com wrote:
> I've a socks5 proxy running on 127.0.0.1:1080 with username and
> passwd set to 123 and 123. Now I want to make another socks5 proxy
> on 127.0.0.1:1090 which uses the 127.0.0.1:1080 as its upstream. The
> test is as follows:

I have done something like this in the past using Dante SOCKS proxy
server as a SOCKS application layer router. It had the ability to chain
proxies including adding authentication to different upstream proxies.

I remember looking at socat at the time and was not able to make it work.

I'm guessing that your problem with socat is realted tot he protocol
that it uses on the northbound / upstream connection.

The only references that I see to proxyauth in the socat man page are in
relation to the PROXY: address type. It also seems as if the PROXY:
address type is for talking to an HTTP proxy using the CONNECT verb,
which is incompatible with the upstream SOCKS proxy.

--
Grant. . . .
unix || die

On Saturday, September 4, 2021 at 10:58:54 PM UTC+8, Grant Taylor wrote:
> On 9/2/21 11:41 PM, hongy...@gmail.com wrote:
> > I've a socks5 proxy running on 127.0.0.1:1080 with username and
> > passwd set to 123 and 123. Now I want to make another socks5 proxy
> > on 127.0.0.1:1090 which uses the 127.0.0.1:1080 as its upstream. The
> > test is as follows:
> I have done something like this in the past using Dante SOCKS proxy
> server as a SOCKS application layer router. It had the ability to chain
> proxies including adding authentication to different upstream proxies.
>
> I remember looking at socat at the time and was not able to make it work.
>
> I'm guessing that your problem with socat is realted tot he protocol
> that it uses on the northbound / upstream connection.
>
> The only references that I see to proxyauth in the socat man page are in
> relation to the PROXY: address type. It also seems as if the PROXY:
> address type is for talking to an HTTP proxy using the CONNECT verb,
> which is incompatible with the upstream SOCKS proxy.

Thank you for sharing your experience. Another similar tool for this purpose is proxychains-ng [1].
All these two tools need the conf file to work instead of the arguments supplied on the command line, which makes it inconvenient for some simple commang line testing scenarios, say, the question discussed here.

[1] https://github.com/rofl0r/proxychains-ng

Best, HY

On Sunday, September 5, 2021 at 8:41:40 AM UTC+8, hongy...@gmail.com wrote:
> On Saturday, September 4, 2021 at 10:58:54 PM UTC+8, Grant Taylor wrote:
> > On 9/2/21 11:41 PM, hongy...@gmail.com wrote:
> > > I've a socks5 proxy running on 127.0.0.1:1080 with username and
> > > passwd set to 123 and 123. Now I want to make another socks5 proxy
> > > on 127.0.0.1:1090 which uses the 127.0.0.1:1080 as its upstream. The
> > > test is as follows:
> > I have done something like this in the past using Dante SOCKS proxy
> > server as a SOCKS application layer router. It had the ability to chain
> > proxies including adding authentication to different upstream proxies.
> >
> > I remember looking at socat at the time and was not able to make it work.
> >
> > I'm guessing that your problem with socat is realted tot he protocol
> > that it uses on the northbound / upstream connection.
> >
> > The only references that I see to proxyauth in the socat man page are in
> > relation to the PROXY: address type. It also seems as if the PROXY:
> > address type is for talking to an HTTP proxy using the CONNECT verb,
> > which is incompatible with the upstream SOCKS proxy.
> Thank you for sharing your experience. Another similar tool for this purpose is proxychains-ng [1].
> All these two tools need the conf file to work instead of the arguments supplied on the command line, which makes it inconvenient for some simple commang line testing scenarios, say, the question discussed here.
>
> [1] https://github.com/rofl0r/proxychains-ng

Another tool that can do the job is 3proxy [1]:

/***
2. Proxy chaining and network connections
+ Username/password authentication for parent proxy(s).
+ HTTPS/SOCKS4/SOCKS5 and ip/port redirection parent support

4. Access control
+ User authentication by username / password
***/

[1] https://github.com/3proxy/3proxy

Best, HY