# An HTTP server (no TLS) that forwards connections via a SOCKS5 server.
- address: 127.0.0.1:8080
  transport: tcp
  protocol:
    type: http
    username: secretuser
    password: secretpass
  rules:
    # Directly connect to 192.168.*
    - mask: 192.168.0.0/16
      action: allow
      client_proxy: direct
    # Forward all other connection requests through a SOCKS server.
    - mask: 0.0.0.0/0
      action: allow
      client_proxy:
        - address: 127.0.0.1:1234
          protocol:
            type: socks
            username: socksuser
            password: sockspass