feat(network-proxy): add a SOCKS5 proxy with policy enforcement #9803

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

viyatb-oai merged 74 commits into main from pr-network-proxy-socks

Jan 27, 2026

codex-rs/Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

codex-rs/network-proxy/Cargo.toml

-Original file line number
+Diff line change
@@ Expand Up / @@ -34,6 +34,7 @@ rama-core = { version = "=0.3.0-alpha.4" } @@
     rama-http = { version = "=0.3.0-alpha.4" }
     rama-http-backend = { version = "=0.3.0-alpha.4", features = ["tls"] }
     rama-net = { version = "=0.3.0-alpha.4", features = ["http", "tls"] }
+    rama-socks5 = { version = "=0.3.0-alpha.4" }
     rama-tcp = { version = "=0.3.0-alpha.4", features = ["http"] }
     rama-tls-boring = { version = "=0.3.0-alpha.4", features = ["http"] }
@@ Expand Down @@

codex-rs/network-proxy/README.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -3,6 +3,7 @@
  
    `codex-network-proxy` is Codex's local network policy enforcement proxy. It runs:

    - an HTTP proxy (default `127.0.0.1:3128`)

    - an optional SOCKS5 proxy (default `127.0.0.1:8081`, disabled by default)

    - an admin HTTP API (default `127.0.0.1:8080`)

    It enforces an allow/deny policy and a "limited" mode intended for read-only network access.

    @@ -20,6 +21,10 @@ Example config:
  
    enabled = true

    proxy_url = "http://127.0.0.1:3128"

    admin_url = "http://127.0.0.1:8080"

    # Optional SOCKS5 listener (disabled by default).

    enable_socks5 = false

    socks_url = "http://127.0.0.1:8081"

    enable_socks5_udp = false

    # When `enabled` is false, the proxy no-ops and does not bind listeners.

    # When true, respect HTTP(S)_PROXY/ALL_PROXY for upstream requests (HTTP(S) proxies only),

    # including CONNECT tunnels in full mode.

    @@ -28,7 +33,7 @@ allow_upstream_proxy = false
  
    # If you want to expose these listeners beyond localhost, you must opt in explicitly.

    dangerously_allow_non_loopback_proxy = false

    dangerously_allow_non_loopback_admin = false

    mode = "limited" # or "full"

    mode = "full" # default when unset; use "limited" for read-only mode

    [network_proxy.policy]

    # Hosts must match the allowlist (unless denied).

    @@ -60,6 +65,12 @@ export HTTP_PROXY="http://127.0.0.1:3128"
  
    export HTTPS_PROXY="http://127.0.0.1:3128"

    ```

    For SOCKS5 traffic (when `enable_socks5 = true`):

    ```bash

    export ALL_PROXY="socks5h://127.0.0.1:8081"

    ```

    ### 4) Understand blocks / debugging

    When a request is blocked, the proxy responds with `403` and includes:

    @@ -70,8 +81,8 @@ When a request is blocked, the proxy responds with `403` and includes:
  
      - `blocked-by-method-policy`

      - `blocked-by-policy`

    In "limited" mode, only `GET`, `HEAD`, and `OPTIONS` are allowed for plain HTTP. HTTPS `CONNECT`

    remains a transparent tunnel, so limited-mode method enforcement does not apply to HTTPS.

    In "limited" mode, only `GET`, `HEAD`, and `OPTIONS` are allowed. HTTPS `CONNECT` and SOCKS5 are

    blocked because they would bypass method enforcement.

    ## Library API

codex-rs/network-proxy/src/config.rs

-Original file line number
+Diff line change
@@ Expand Up / @@ -23,6 +23,12 @@ pub struct NetworkProxySettings { @@
         #[serde(default = "default_admin_url")]
         pub admin_url: String,
         #[serde(default)]
+        pub enable_socks5: bool,
+        #[serde(default = "default_socks_url")]
+        pub socks_url: String,
+        #[serde(default)]
+        pub enable_socks5_udp: bool,
+        #[serde(default)]
         pub allow_upstream_proxy: bool,
         #[serde(default)]
         pub dangerously_allow_non_loopback_proxy: bool,
@@ Expand All / @@ -40,6 +46,9 @@ impl Default for NetworkProxySettings { @@
                 enabled: false,
                 proxy_url: default_proxy_url(),
                 admin_url: default_admin_url(),
+                enable_socks5: false,
+                socks_url: default_socks_url(),
+                enable_socks5_udp: false,
                 allow_upstream_proxy: false,
                 dangerously_allow_non_loopback_proxy: false,
                 dangerously_allow_non_loopback_admin: false,
@@ Expand Down Expand Up / @@ -90,6 +99,10 @@ fn default_admin_url() -> String { @@
         "http://127.0.0.1:8080".to_string()
     }
+    fn default_socks_url() -> String {
+        "http://127.0.0.1:8081".to_string()
+    }
     /// Clamp non-loopback bind addresses to loopback unless explicitly allowed.
     fn clamp_non_loopback(addr: SocketAddr, allow_non_loopback: bool, name: &str) -> SocketAddr {
         if addr.ip().is_loopback() {
@@ Expand All @@
     pub(crate) fn clamp_bind_addrs(
         http_addr: SocketAddr,
+        socks_addr: SocketAddr,
         admin_addr: SocketAddr,
         cfg: &NetworkProxySettings,
-    ) -> (SocketAddr, SocketAddr) {
+    ) -> (SocketAddr, SocketAddr, SocketAddr) {
         let http_addr = clamp_non_loopback(
             http_addr,
             cfg.dangerously_allow_non_loopback_proxy,
             "HTTP proxy",
         );
+        let socks_addr = clamp_non_loopback(
+            socks_addr,
+            cfg.dangerously_allow_non_loopback_proxy,
+            "SOCKS5 proxy",
+        );
         let admin_addr = clamp_non_loopback(
             admin_addr,
             cfg.dangerously_allow_non_loopback_admin,
             "admin API",
         );
         if cfg.policy.allow_unix_sockets.is_empty() {
-            return (http_addr, admin_addr);
+            return (http_addr, socks_addr, admin_addr);
         }
         // `x-unix-socket` is intentionally a local escape hatch. If the proxy (or admin API) is
@@ Expand All / @@ -136,19 +155,26 @@ pub(crate) fn clamp_bind_addrs( @@
                 "unix socket proxying is enabled; ignoring dangerously_allow_non_loopback_proxy and clamping HTTP proxy to loopback"
             );
         }
+        if cfg.dangerously_allow_non_loopback_proxy && !socks_addr.ip().is_loopback() {
+            warn!(
+                "unix socket proxying is enabled; ignoring dangerously_allow_non_loopback_proxy and clamping SOCKS5 proxy to loopback"
+            );
+        }
         if cfg.dangerously_allow_non_loopback_admin && !admin_addr.ip().is_loopback() {
             warn!(
                 "unix socket proxying is enabled; ignoring dangerously_allow_non_loopback_admin and clamping admin API to loopback"
             );
         }
         (
             SocketAddr::from(([127, 0, 0, 1], http_addr.port())),
+            SocketAddr::from(([127, 0, 0, 1], socks_addr.port())),
             SocketAddr::from(([127, 0, 0, 1], admin_addr.port())),
         )
     }
     pub struct RuntimeConfig {
         pub http_addr: SocketAddr,
+        pub socks_addr: SocketAddr,
         pub admin_addr: SocketAddr,
     }
@@ Expand All @@
                 cfg.network_proxy.proxy_url
             )
         })?;
+        let socks_addr = resolve_addr(&cfg.network_proxy.socks_url, 8081).with_context(|| {
+            format!(
+                "invalid network_proxy.socks_url: {}",
+                cfg.network_proxy.socks_url
+            )
+        })?;
         let admin_addr = resolve_addr(&cfg.network_proxy.admin_url, 8080).with_context(|| {
             format!(
                 "invalid network_proxy.admin_url: {}",
                 cfg.network_proxy.admin_url
             )
         })?;
-        let (http_addr, admin_addr) = clamp_bind_addrs(http_addr, admin_addr, &cfg.network_proxy);
+        let (http_addr, socks_addr, admin_addr) =
+            clamp_bind_addrs(http_addr, socks_addr, admin_addr, &cfg.network_proxy);
         Ok(RuntimeConfig {
             http_addr,
+            socks_addr,
             admin_addr,
         })
     }
@@ Expand Down Expand Up / @@ -403,11 +437,14 @@ mod tests { @@
                 ..Default::default()
             };
             let http_addr = "0.0.0.0:3128".parse::<SocketAddr>().unwrap();
+            let socks_addr = "0.0.0.0:8081".parse::<SocketAddr>().unwrap();
             let admin_addr = "0.0.0.0:8080".parse::<SocketAddr>().unwrap();
-            let (http_addr, admin_addr) = clamp_bind_addrs(http_addr, admin_addr, &cfg);
+            let (http_addr, socks_addr, admin_addr) =
+                clamp_bind_addrs(http_addr, socks_addr, admin_addr, &cfg);
             assert_eq!(http_addr, "0.0.0.0:3128".parse::<SocketAddr>().unwrap());
+            assert_eq!(socks_addr, "0.0.0.0:8081".parse::<SocketAddr>().unwrap());
             assert_eq!(admin_addr, "0.0.0.0:8080".parse::<SocketAddr>().unwrap());
         }
@@ Expand All / @@ -423,11 +460,14 @@ mod tests { @@
                 ..Default::default()
             };
             let http_addr = "0.0.0.0:3128".parse::<SocketAddr>().unwrap();
+            let socks_addr = "0.0.0.0:8081".parse::<SocketAddr>().unwrap();
             let admin_addr = "0.0.0.0:8080".parse::<SocketAddr>().unwrap();
-            let (http_addr, admin_addr) = clamp_bind_addrs(http_addr, admin_addr, &cfg);
+            let (http_addr, socks_addr, admin_addr) =
+                clamp_bind_addrs(http_addr, socks_addr, admin_addr, &cfg);
             assert_eq!(http_addr, "127.0.0.1:3128".parse::<SocketAddr>().unwrap());
+            assert_eq!(socks_addr, "127.0.0.1:8081".parse::<SocketAddr>().unwrap());
             assert_eq!(admin_addr, "127.0.0.1:8080".parse::<SocketAddr>().unwrap());
         }
     }

codex-rs/network-proxy/src/lib.rs

-Original file line number
+Diff line change
@@ Expand Up / @@ -9,6 +9,7 @@ mod proxy; @@
     mod reasons;
     mod responses;
     mod runtime;
+    mod socks5;
     mod state;
     mod upstream;
@@ Expand Down @@

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(network-proxy): add a SOCKS5 proxy with policy enforcement #9803

Uh oh!

Diff view

Diff view

There are no files selected for viewing

Uh oh!

chatgpt-codex-connector bot Jan 26, 2026

Uh oh!

Uh oh!

Uh oh!

feat(network-proxy): add a SOCKS5 proxy with policy enforcement #9803

Uh oh!

feat(network-proxy): add a SOCKS5 proxy with policy enforcement #9803

Uh oh!

Uh oh!

Diff view

Diff view

There are no files selected for viewing

Uh oh!

chatgpt-codex-connector bot Jan 26, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!