# An HTTP server (no TLS) that forwards connections via a SOCKS5 server.
- address: 127.0.0.1:8080
  transport: tcp
  protocol:
    type: http
    username: secretuser
    password: secretpass
  rules:
    # Directly connect to 192.168.*
    - mask: 192.168.0.0/16
      action: allow
      # client_chain: direct is optional - direct is the default when omitted
      client_chain: direct
    # Forward all other connection requests through a SOCKS server.
    - mask: 0.0.0.0/0
      action: allow
      client_chain:
        address: 127.0.0.1:1234
        protocol:
          type: socks
          username: socksuser
          password: sockspass
