### Start Standalone Proxy Service

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Example command to start a standalone proxy module from the command line.

```bash
$/sbin/socks -l/var/log/socks.log -i127.0.0.1
```

--------------------------------

### Install 3proxy via Package Managers

Source: https://github.com/3proxy/3proxy.github.io/blob/main/howtoe.html

Install pre-built binaries on Linux distributions.

```bash
sudo dpkg -i 3proxy_*.deb
```

```bash
sudo rpm -i 3proxy-*.rpm
```

--------------------------------

### Start SOCKS Proxy with File Logging

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Example command to initiate a SOCKS proxy service with logging directed to a specific file.

```bash
/usr/local/sbin/socks -l/var/log/socks.log
```

--------------------------------

### Install 3proxy on Unix/Linux

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Installation methods using Makefile, CMake, and package managers.

```bash
sudo make install
```

```bash
mkdir build && cd build
cmake ..
cmake --build .
sudo cmake --install .
```

```bash
sudo dpkg -i 3proxy_*.deb
```

```bash
sudo rpm -i 3proxy-*.rpm
```

```bash
sudo systemctl enable 3proxy
sudo systemctl start 3proxy
```

--------------------------------

### Install 3proxy on macOS

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Installation methods using CMake and Makefile.

```bash
mkdir build && cd build
cmake ..
cmake --build .
sudo cmake --install .
```

```bash
ln -sf Makefile.FreeBSD Makefile
make
sudo make install
```

--------------------------------

### Install 3proxy on Unix/Linux via Makefile

Source: https://github.com/3proxy/3proxy.github.io/blob/main/howtoe.html

Install binaries and configuration files using the Makefile target.

```bash
sudo make install
```

--------------------------------

### Example of Updating Configuration Files Safely

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/highload.html

This example demonstrates a strategy for safely updating configuration files by using a lock file and a version file to prevent race conditions during reloads.

```bash
touch /some/path/3proxy/3proxy.lck
```

```bash
system "rm /some/path/3proxy/3proxy.lck"
```

```bash
monitor "/some/path/3proxy/3proxy.ver"
```

```bash
touch /some/path/3proxy/3proxy.ver
```

--------------------------------

### Install 3proxy on Unix/Linux via CMake

Source: https://github.com/3proxy/3proxy.github.io/blob/main/howtoe.html

Build and install 3proxy using CMake commands.

```bash
mkdir build && cd build
cmake ..
cmake --build .
sudo cmake --install .
```

--------------------------------

### Example 3proxy.cfg Configuration

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

A sample configuration file demonstrating how to define logging, rotation, internal/external interfaces, and multiple proxy services.

```text
log /var/log/3proxy.log D
rotate 30
internal 127.0.0.1
external 192.168.1.1
proxy
socks -p3129
pop3p
```

--------------------------------

### Install and Remove 3proxy on Windows

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Service installation and removal commands via command prompt.

```bash
D:\>C:
C:\>cd C:\Program Files\3proxy
C:\Program Files\3proxy>3proxy.exe --install
```

```bash
D:\>C:
C:\>cd C:\Program Files\3proxy
C:\Program Files\3proxy>net stop 3proxy
C:\Program Files\3proxy>3proxy.exe --remove
```

--------------------------------

### Manage 3proxy Service with Systemd

Source: https://github.com/3proxy/3proxy.github.io/blob/main/howtoe.html

Enable and start the 3proxy service using systemctl.

```bash
sudo systemctl enable 3proxy
sudo systemctl start 3proxy
```

--------------------------------

### Install 3proxy service with custom config path

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Command to install the 3proxy service using a specific configuration file path.

```bash
3proxy --install full_path_to_configuration_file
```

--------------------------------

### Install 3proxy on macOS via Makefile

Source: https://github.com/3proxy/3proxy.github.io/blob/main/howtoe.html

Build and install 3proxy on macOS using the FreeBSD Makefile.

```bash
ln -sf Makefile.FreeBSD Makefile
make
sudo make install
```

--------------------------------

### Start TrafficPlugin

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/plugins/TrafficPlugin.html

Starts the TrafficPlugin.dll. Ensure the DLL is in the same folder as the 3proxy executable.

```config
plugin TrafficPlugin.dll start
```

--------------------------------

### Configure Connect-Back Proxy Instance

Source: https://github.com/3proxy/3proxy.github.io/blob/main/howtoe.html

Example configuration for a proxy instance on a restricted host that connects back to an external listener.

```text
users user:CL:password
auth strong
allow user
proxy -rhost.dyndns.example.org:1234
```

--------------------------------

### Configure Connect-Back Listener Instance

Source: https://github.com/3proxy/3proxy.github.io/blob/main/howtoe.html

Example configuration for the listener instance on the external host that accepts connections from the restricted proxy.

```text
auth iponly
allow * * 1.1.1.1
tcppm -R0.0.0.0:1234 3128 1.1.1.1 3128
```

--------------------------------

### Plugin Loading Example

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man3/3proxy.cfg.3.html

Illustrates how to load a shared library plugin and call a specific function with arguments. The function should return 0 on success and a positive value on error.

```config
plugin <path_to_shared_library> <function_to_call> [<arg1> ...]
```

--------------------------------

### Manage 3proxy service on macOS

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Commands to load, start, stop, and unload the 3proxy service using launchctl.

```bash
sudo launchctl load /Library/LaunchDaemons/org.3proxy.3proxy.plist
```

```bash
sudo launchctl stop org.3proxy.3proxy
```

```bash
sudo launchctl start org.3proxy.3proxy
```

```bash
sudo launchctl unload /Library/LaunchDaemons/org.3proxy.3proxy.plist
```

--------------------------------

### SSL/mTLS Development Setup Script

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

A shell script to automate the creation of a CA, server certificate, and client certificate for testing SSLPlugin.

```bash
#!/bin/sh
# Creates CA, server, and client certificates for SSLPlugin testing

# CA
openssl genrsa -out ca.key 4096
openssl req -x509 -new -nodes -key ca.key -sha256 -days 3650 \
    -subj "/CN=3proxy CA" -out ca.crt

# Server
openssl genrsa -out server.key 2048
openssl req -new -key server.key -subj "/CN=localhost" -out server.csr
cat > server.ext << 'EOF'
basicConstraints=CA:FALSE
keyUsage = keyEncipherment
extendedKeyUsage = serverAuth
subjectAltName = DNS:localhost,DNS:proxy,IP:127.0.0.1
EOF
openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key \
    -CAcreateserial -out server.crt -days 365 -sha256 -extfile server.ext

# Client
openssl genrsa -out client.key 2048
openssl req -new -key client.key -subj "/CN=client" -out client.csr
cat > client.ext << 'EOF'
basicConstraints=CA:FALSE
extendedKeyUsage = clientAuth
EOF
openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key \
    -CAcreateserial -out client.crt -days 365 -sha256 -extfile client.ext
openssl pkcs12 -export -out client.p12 -passout pass: \
    -inkey client.key -in client.crt -certfile ca.crt
```

--------------------------------

### Configure Bandwidth Limiting

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man5/3proxy.cfg.5.html

Examples of setting bandwidth limits for specific IP ranges or shared channels.

```text
bandlimin 57600 * 192.168.10.16
bandlimin 57600 * 192.168.10.17
bandlimin 57600 * 192.168.10.18
bandlimin 57600 * 192.168.10.19
```

```text
bandlimin 57600 * 192.168.10.16/30
```

```text
nobandlimin * * * 110
```

--------------------------------

### Schedule Function Example in C

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/devel/devref.html

Demonstrates how to define and schedule a function to be called periodically by 3proxy. Ensure time_t compatibility between plugin and 3proxy compilation.

```c
int myschedfunc(void * data);
struct schedule myschedule;

myschedule.data = "somethinghere";
myschedule.function = myschedfunc;
myschedule.type = MINUTELY;
myschedule.starttime = 0;
myschedule.next = *pluginlink->schedule;
*pluginlink->schedule = myschedule;
```

--------------------------------

### Configure Multiple Authentication Types

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man5/3proxy.cfg.5.html

Example of combining multiple authentication methods in a single command to allow flexible access control.

```text
auth iponly strong
```

--------------------------------

### Configure TLS Proxy (tlspr) Services

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Examples for setting up implicit and explicit TLS proxies using the tlspr command with various flags.

```text
# https (implicit)
tlspr -p443 -P443 -c1
# imaps (implicit)
tlspr -p993 -P993 -c1
# submissions (implicit)
tlspr -p465 -P465 -c1
# imap STARTTLS (explicit)
tlspr -p143 -P143 -Ximap
# submission STARTTLS (explicit)
tlspr -p587 -P587 -Xsmtp
# pop3 STLS (explicit)
tlspr -p110 -P110 -Xpop3
```

--------------------------------

### Configure weight for ACL

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man5/3proxy.cfg.5.html

Example of setting a weight for a specific allow rule.

```text
allow * * 192.168.1.1
weight 100
```

--------------------------------

### Configure User Authentication

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man5/3proxy.cfg.5.html

Examples of defining users with different password types including cleartext, crypt, and NT hashes.

```text
users test1:CL:password1 "test2:CR:$1$lFDGlder$pLRb4cU2D7GAT58YQvY49."
```

```text
users test3:NT:BD7DFBF29A93F93C63CB84790DA00E63
```

```text
users "test4:CR:$3$salt$G47yV9w...."
```

--------------------------------

### Configure Parent Proxy Chaining

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man5/3proxy.cfg.5.html

Examples of using the parent directive to define proxy chains with weighted selection.

```text
allow *
parent 500 socks5 192.168.10.1 1080
parent 500 connect 192.168.10.1 3128
```

```text
allow * * * 80
parent 1000 socks5 192.168.10.1 1080
parent 1000 connect 192.168.20.1 3128
parent 300 socks4 192.168.30.1 1080
parent 700 socks5 192.168.40.1 1080
```

--------------------------------

### Define Default Access Control Rules

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man5/3proxy.cfg.5.html

Examples of setting default access policies when the access list is empty or explicitly defined.

```text
allow *
```

```text
deny *
```

--------------------------------

### Configure external IP address redirection

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man5/3proxy.cfg.5.html

Example of changing the external address for a connection to a specific IP.

```text
parent 1000 http 1.2.3.4 0
```

--------------------------------

### Example Traffic Correction Rules

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/plugins/TrafficPlugin.html

Demonstrates the application of traffic correction rules. The second rule for socks5 with any port has a lower coefficient and will be applied if the first rule doesn't match.

```config
plugin "TrafficPlugin.dll" start
trafcorrect m socks5 6112 4.5
trafcorrect m socks5 * 1.1
```

--------------------------------

### Configure Log Formats for External Analyzers

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Examples of logformat strings compatible with common log analysis tools like Squid and ISA proxy.

```text
"- +\_G%t.%. %D %C TCP\_MISS/200 %I %1-1T %2-2T %U DIRECT/%R application/unknown"
```

```text
"- +\_G%t.%.      1 %C TCP\_MISS/200 %I %1-1T %2-2T %U
 DIRECT/%R application/unknown"
```

```text
"-	+ L%C	%U	Unknown	Y	%Y-%m-%d	%H:%M:%S
	w3proxy	3PROXY	-	%n	%R	%r	%D
	%O	%I	http	TCP	%1-1T	%2-2T	-	-
	%E	-	-	-"
```

```text
"-	+ L%C	%U	Unknown	%Y-%m-%d	%H:%M:%S
	3PROXY	-	%n	%R	%r	%D	%O
	%I	http	%1-1T	%2-2T	-	%E	-
	-	Internal	External	0x0	Allowed"
```

```text
"-	+ L%C	%U	unknown:0:0.0	N	%Y-%m-%d
	%H:%M:%S	fwsrv	3PROXY	-	%n	%R	%r
	%D	%O	%I	%r	TCP	Connect	-	-
	-	%E	-	-	-	-	-"
```

```text
"- ""+\_L%C - %U [%d/%o/%Y:%H:%M:%S %z] "%T" %E %I"
```

```text
"- ""+\_L%C - %U [%d/%o/%Y:%H:%M:%S %z] "%T" 200 %I"
```

--------------------------------

### Access Control List Flushing Example

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man3/3proxy.cfg.3.html

Shows how to flush the active access list and then define new ACLs for specific services like pop3p and socks.

```config
allow * 
pop3p
flush
allow * 192.168.1.0/24
socks
```

--------------------------------

### User Authentication Examples

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man3/3proxy.cfg.3.html

Demonstrates different password types for user authentication: cleartext, crypt-style, and NT password (hex). Double quotes are required if the password contains a '$' sign.

```config
users test1:CL:password1 "test2:CR:$1$lFDGlder$pLRb4cU2D7GAT58YQvY49."
users test3:NT:BD7DFBF29A93F93C63CB84790DA00E63
```

--------------------------------

### Mutual TLS (mTLS) Example

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/plugins/SSLPlugin.html

Creates an HTTPS proxy that requires client certificate authentication. Ensure the CA file is correctly specified for verification.

```plaintext
ssl_server_cert /path/to/server.crt
ssl_server_key /path/to/server.key
ssl_server_ca_file /path/to/ca.crt
ssl_server_verify
ssl_serv
proxy -p3128
```

--------------------------------

### Using Encrypted Password in 3proxy.cfg

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man8/3proxy_crypt.8.html

Example of how to use a generated BLAKE2b password hash (prefixed with CR:) in the 3proxy configuration file with the 'users' directive.

```bash
users user1:CR:$3$MySalt$...
```

--------------------------------

### TransparentPlugin Configuration Example

Source: https://github.com/3proxy/3proxy.github.io/blob/main/plugins/TransparentPlugin/index.html

This configuration enables the TransparentPlugin to act as a transparent proxy. It sets up logging, allows access on port 80, defines a parent HTTP proxy, and then configures a parent SOCKSv5 proxy for transparent traffic. Traffic redirected to LOCAL_IP:12345 will be routed through the SOCKSv5 proxy.

```plaintext
plugin /path/to/TransparentPlugin.ld.so transparent_plugin
log /path/to/log
auth iponly
allow * * *
allow * 80
parent 1000 http 0.0.0.0 0
allow *
parent 1000 socks5 SOCKS5_IP SOCKS5_PORT USER PASSWORD
transparent
tcppm -iLOCAL_IP 12345 127.0.0.1 11111
notransparent
proxy
```

--------------------------------

### Initialize UI and syntax highlighting

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Handles the visibility of the info block based on local storage and initializes syntax highlighting for code blocks.

```javascript
$(document).ready(function() { // info-block if (localStorage.getItem('show-info-block') == null) { $('.info-block').show('slow'); } else { $('.info-block').hide('slow'); } $('.close-info-block').on('click', function(){ localStorage.setItem('show-info-block', '0'); }) // code highlighting $('pre code').each(function(i, block) { hljs.highlightBlock(block); }); });
```

--------------------------------

### Compile 3proxy with CMake on Windows

Source: https://github.com/3proxy/3proxy.github.io/blob/main/howtoe.html

Generate a Visual Studio solution and build the release configuration.

```bash
cmake -G "Visual Studio 17 2022" -A x64 ..
cmake --build . --config Release
```

--------------------------------

### Configure Connection Rate Limiting

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man5/3proxy.cfg.5.html

Examples of limiting connection rates or simultaneous connections per client.

```text
connlim 100 60 * 127.0.0.1
```

```text
connlim 20 0 * 127.0.0.1
```

--------------------------------

### Configure logging suppression for ACL

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man5/3proxy.cfg.5.html

Example of using the nolog directive to prevent logging for a specific allow rule.

```text
allow * * 192.168.1.1
nolog
```

--------------------------------

### Compile 3proxy with GCC on Unix/Linux

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Build process using platform-specific Makefiles.

```bash
ln -sf Makefile.Linux Makefile
make
```

```bash
ln -sf Makefile.FreeBSD Makefile
make
```

--------------------------------

### Build and run full 3proxy Docker image

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Commands to build the full Docker image and run it with a mounted configuration file.

```bash
docker build -f Dockerfile.full -t 3proxy.full .
docker run -p 3129:3129 -v /path/to/config:/usr/local/3proxy/conf 3proxy.full
```

--------------------------------

### Standalone SNI proxy configuration

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Example of a standalone SNI proxy on port 1443 redirecting to destination port 443.

```text
tlspr -p1443 -P443 -c1
```

--------------------------------

### Configure Connect-Back Proxy

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Set up a reverse proxy connection where an internal host connects back to an external listener. Requires two 3proxy instances.

```3proxy
users user:CL:password
auth strong
allow user
proxy -rhost.dyndns.example.org:1234
```

```3proxy
auth iponly
allow * * 1.1.1.1
tcppm -R0.0.0.0:1234 3128 1.1.1.1 3128
```

--------------------------------

### Build and run minimal 3proxy Docker image

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Commands to build the minimal Docker image and run it with configuration provided via stdin.

```bash
docker build -f Dockerfile.minimal -t 3proxy.minimal .
docker run -i -p 3129:3129 --name 3proxy 3proxy.minimal
```

--------------------------------

### Compile 3proxy with CMake

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Standard build process using CMake for cross-platform support.

```bash
mkdir build
cd build
cmake ..
cmake --build .
```

```bash
cmake -G "Visual Studio 17 2022" -A x64 ..
cmake --build . --config Release
```

```bash
cmake -D3PROXY_USE_OPENSSL=ON -D3PROXY_USE_PCRE2=ON ..
```

--------------------------------

### Parent Proxy with IP and Port Modification

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man3/3proxy.cfg.3.html

Example showing how to modify only the IP or port of the original request when redirecting to a parent proxy.

```3proxy
parent 1000 http 1.2.3.4 0
```

--------------------------------

### Configure HTTPS proxy with SSL/TLS

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Sets up an HTTPS proxy using server certificates and keys.

```text
ssl_server_cert /etc/3proxy/certs/server.crt
ssl_server_key /etc/3proxy/certs/server.key
```

--------------------------------

### Configure Windows Authentication Plugin

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/plugins/WindowsAuthentication.html

Configure the plugin with the 'plugin' command in 3proxy.cfg. Specify the DLL location and the allowed Windows group.

```config
plugin "WindowsAuthentication.dll" WindowsAuthentication "3ProxyAllowedGroup"
```

--------------------------------

### Define Plugin Loading Syntax

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man5/3proxy.cfg.5.html

Loads a shared library and executes the specified export function with provided arguments.

```text
int functions_to_call(struct pluginlink * pl, int argc, char * argv[]);
```

--------------------------------

### Proxy Chaining with Weights

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man3/3proxy.cfg.3.html

Demonstrates how to group proxies using weights for random selection. Proxies with a combined weight of 1000 form a group.

```3proxy
allow *
parent 500 socks5 192.168.10.1 1080
parent 500 connect 192.168.10.1 3128
```

--------------------------------

### Configure HAProxy PROXY protocol header

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man5/3proxy.cfg.5.html

Example of using the HAProxy PROXY protocol v1 header to pass client IP information to a parent proxy.

```text
parent 1000 ha
```

--------------------------------

### Compile 3proxy with Visual C++

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Command to compile the 3proxy source code using NMAKE and the provided MSVC makefile.

```bash
nmake /f Makefile.msvc
```

--------------------------------

### Incorrect Rule Order Example

Source: https://github.com/3proxy/3proxy.github.io/blob/main/plugins/TrafficPlugin/index.html

Illustrates an incorrect rule order where a general rule precedes a specific one, preventing the specific rule from ever being applied.

```config
trafcorrect m socks5 *
1.1
trafcorrect m socks5 6112 4.5
```

--------------------------------

### Setup Local Redirections for Multiple Ports

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Configures local redirection for HTTP and FTP traffic, requiring dual ACL checks for the SOCKS and protocol-specific proxy layers.

```text
auth iponly
allow * * * 80,8080-8088
parent 1000 http 0.0.0.0 0
allow * * * 80,8080-8088
#redirect ports 80 and 8080-8088 to local HTTP proxy
#Second allow is required, because ACLs are checked
#twice: first time by socks and second by http proxy.

allow * * * 21,2121
parent 1000 ftp 0.0.0.0 0
allow * * * 21,2121
#redirect ports 21 and 2121 to local
#ftp proxy


allow *
#allow the rest of connections directly

socks
#now let the socks server start
```

--------------------------------

### Configure 3proxy with CMake Options

Source: https://github.com/3proxy/3proxy.github.io/blob/main/howtoe.html

Enable optional features like OpenSSL or PCRE2 during the CMake configuration step.

```bash
cmake -D3PROXY_USE_OPENSSL=ON -D3PROXY_USE_PCRE2=ON ..
```

--------------------------------

### Initialize syntax highlighting

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man8/3proxy.8.html

JavaScript snippet used to initialize syntax highlighting and handle anchor scrolling on the documentation page.

```javascript
$(document).ready(function() { $('pre code').each(function(i, block) { hljs.highlightBlock(block); }); var offset = $(':target').offset(); var scrollto = offset.top - 60; // minus fixed header height $('html, body').animate({scrollTop:scrollto}, 0); });
```

--------------------------------

### Generate Server Certificate with SAN

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/howtoe.html

Creates a server private key, CSR, and extensions file for Subject Alternative Names.

```bash
# Generate server private key
openssl genrsa -out server.key 2048

# Create a certificate signing request (CSR)
openssl req -new -key server.key \
    -subj "/C=US/ST=State/L=City/O=MyOrg/CN=proxy.example.com" \
    -out server.csr

# Create extensions file for SAN
cat > server.ext << 'EOF'
authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names

[alt_names]
DNS.1 = proxy.example.com
DNS.2 = proxy
IP.1 = 192.168.1.100
EOF

# Sign the certificate with CA
openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key \
```

--------------------------------

### HAProxy PROXY Protocol v1 Header

Source: https://github.com/3proxy/3proxy.github.io/blob/main/doc/man3/3proxy.cfg.3.html

Example of using the 'ha' parent type to send HAProxy PROXY protocol v1 header to the parent proxy. This must be the last in the chain.

```3proxy
parent 1000 ha
```

--------------------------------

### Example Traffic Correction Rules

Source: https://github.com/3proxy/3proxy.github.io/blob/main/plugins/TrafficPlugin/index.html

Demonstrates the application of traffic correction rules. The first rule for socks5 with port 6112 uses a coefficient of 4.5, and a general rule for socks5 uses 1.1.

```config
trafcorrect m socks5 6112 4.5
trafcorrect m socks5 * 1.1
```