SOCKS протокылы және прокси-серверлер

Internet protocol that uses a proxy server
the internet protocol

SOCKS is an Internet protocol that exchanges network packets between a client and server through a proxy server. SOCKS5 optionally provides authentication so only authorized users may access a server. Practically, a SOCKS server proxies TCP connections to an arbitrary IP address, and provides a means for UDP packets to be forwarded. A SOCKS server accepts incoming client connection on TCP port 1080, as defined in .

The protocol was originally developed/designed by David Koblas, a system administrator of MIPS Computer Systems. After MIPS was taken over by Silicon Graphics in 1992, Koblas presented a paper on SOCKS at that year's Usenix Security Symposium, making SOCKS publicly available. The protocol was extended to version 4 by Ying Da Lee of NEC. The SOCKS reference architecture and client are owned by Permeo Technologies, a spin off from NEC. (Blue Coat Systems bought out Permeo Technologies, and were in turn acquired by Symantec.) The SOCKS5 protocol was originally a security protocol that made firewalls and other security products easier to administer. It was approved by the IETF in 1996 as (authored by: M. Leech, M. Ganis, Y. Lee, R. Kuris, D. Koblas, and L. Jones). The protocol was developed in collaboration with Aventail Corporation, which markets the technology outside of Asia.

Sun Java System Web Proxy Server is a caching proxy server running on Solaris, Linux and Windows servers that support HTTPS, NSAPI I/O filters, dynamic reconfiguration, SOCKSv5 and reverse proxy. WinGate is a multi protocol proxy server and SOCKS server for Microsoft Windows which supports SOCKS4, SOCKS4a and SOCKS5 (including UDP ASSOCIATE and GSSAPI auth). It also supports handing over SOCKS connections to the HTTP proxy, so can cache and scan HTTP over SOCKS. Socksgate5 SocksGate5 is an application SOCKS firewall with inspection feature on Layer 7 of the OSI model, the Application Layer. Because packets are inspected at 7 OSI Level the application SOCKS firewall may search for protocol non compliance and blocking specified content. Dante is a circuit level SOCKS server that can be used to provide convenient and secure network connectivity, requiring only the host Dante runs on to have external network connectivity. HevSocks5Server is a high performance and low overhead SOCKS server for Unix (Linux/BSD/macOS). It supports standard TCP CONNECT and UDP ASSOCIATE methods and multiple username/password authentication.

OpenSSH allows dynamic creation of tunnels, specified via a subset of the SOCKS protocol, supporting the CONNECT command. PuTTY is a Win32 SSH client that supports local creation of SOCKS (dynamic) tunnels through remote SSH servers. Secure ShellFish is a SSH client for iOS and macOS that includes a SOCKS server. ShimmerCat is a web server that uses SOCKS5 to simulate an internal network, allowing web developers to test their local sites without modifying their /etc/hosts file. Tor is a system intended to enable online anonymity. Tor offers a TCP only SOCKS server interface to its clients. Shadowsocks is a circumvent censorship tool. It provides a SOCKS5 interface. netcat implementations, as Ncat and socat.

Client software must have native SOCKS support in order to connect through SOCKS.

Socksifiers allow applications to access the networks to use a proxy without needing to support any proxy protocols. The most common way is to set up a virtual network adapter and appropriate routing tables to send traffic through the adapter. Win2Socks, which enables applications to access the network through SOCKS5, HTTPS or Shadowsocks. tun2socks, an open source tool that creates virtual TCP TUN adapters from a SOCKS proxy, capable of UDP if supported on another end. Works on Linux and Windows, has a macOS port and reimplementation in Golang. Another written in C with good performance, works on Linux/Android/BSD/macOS and iOS
proxychains, a Unix program that forces TCP traffic through SOCKS or HTTP proxies on (dynamically linked) programs it launches. Works on various Unix like systems.

Polipo, a discontinued forwarding and caching HTTP/1.1 proxy server with IPv4 support. Open Source running on Linux, OpenWrt, Windows, Mac OS X, and FreeBSD. Almost any Web browser can use it. Privoxy, a non caching SOCKS to HTTP proxy. Tinyproxy, a light weight HTTP/HTTPS proxy daemon for POSIX operating systems. Designed from the ground up to be fast and yet small. It presents an http proxy interface and can connect to SOCKS4/5 and http upstream proxies.

Due to lack of request and packets exchange encryption it makes SOCKS practically vulnerable to man in the middle attacks and IP addresses eavesdropping which in consequence clears a way to censorship by governments.