菜单
Debug proxy connection issues including connectivity, authentication, TLS errors, and DNS resolution. Use when a proxy is not forwarding traffic, returning errors, or timing out.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Configure Envoy proxy for HTTP reverse proxying, TCP forwarding, TLS termination, gRPC proxying, or traffic management. Use when creating or editing Envoy bootstrap YAML configs.
Configure frp (Fast Reverse Proxy) to expose services behind NAT or firewalls. Use when setting up frps (server) and frpc (client) configs for TCP, UDP, HTTP, HTTPS, or SOCKS5 tunnelling.
Configure go-gost (Go Simple Tunnel) proxy. Use when setting up SOCKS5/HTTP proxies, port forwarding, proxy chaining, SSH tunnels, TLS-encrypted proxies, or DNS-over-TLS with go-gost v3.
Configure HAProxy for TCP or HTTP load balancing, SSL/TLS termination, and ACL-based routing. Use when creating or editing haproxy.cfg files for frontends, backends, and listen sections.
Configure nginx as a reverse proxy, load balancer, stream (TCP/UDP) proxy, SSL termination frontend, or HTTP forward proxy. Use when working with nginx.conf or nginx stream module configs.
Configure Proxyman for HTTP/HTTPS traffic interception on macOS/iOS. Use when writing Proxyman addon scripts to rewrite headers, mock responses, block requests, or map URLs to local fixtures.
| name | debug-proxy-connection |
| description | Debug proxy connection issues including connectivity, authentication, TLS errors, and DNS resolution. Use when a proxy is not forwarding traffic, returning errors, or timing out. |
| license | Apache-2.0 |
| compatibility | Requires curl, nc (netcat), openssl, and the relevant proxy tool. |
| metadata | {"author":"proxy-tools","version":"1.0"} |
| allowed-tools | bash |
nc -zv <proxy-host> <proxy-port>
# or
ss -tlnp | grep <proxy-port>
# HTTP proxy
curl -v --proxy http://<proxy-host>:<port> http://httpbin.org/ip
# HTTP proxy with authentication
curl -v --proxy http://user:pass@<proxy-host>:<port> http://httpbin.org/ip
# HTTPS through HTTP proxy (CONNECT tunnel)
curl -v --proxy http://<proxy-host>:<port> https://httpbin.org/ip
# SOCKS5 (hostname resolution on proxy side)
curl -v --proxy socks5h://<proxy-host>:<port> https://httpbin.org/ip
# SOCKS5 with auth
curl -v --proxy socks5h://user:pass@<proxy-host>:<port> https://httpbin.org/ip
# Inspect the TLS certificate presented by the proxy
openssl s_client -connect <proxy-host>:<port>
# Check if the CA cert is trusted
curl --cacert /path/to/ca.crt --proxy https://<proxy-host>:<port> https://example.com
# SOCKS5h resolves DNS on the proxy side — if this fails, DNS is broken on proxy
curl -v --proxy socks5h://<proxy-host>:<port> http://google.com
| Tool | How to enable debug logs |
|---|---|
| go-gost | log.level: debug in config.yaml |
| Envoy | --log-level debug or admin: /logging?level=debug |
| nginx | error_log /var/log/nginx/error.log debug; |
| HAProxy | log stdout format raw local0 debug in global |
| Traefik | log.level: DEBUG in traefik.yml |
| frp | log.level = "debug" in frps.toml / frpc.toml |
| chisel | Add --verbose flag |
| Error | Likely cause | Fix |
|---|---|---|
Connection refused | Service not running / wrong port | Check docker ps, verify port |
407 Proxy Auth Required | Missing credentials | Add --proxy-user user:pass |
SSL_ERROR / cert mismatch | Wrong CA or SNI | Use --insecure for testing; fix certs for prod |
Connection timed out | Firewall blocking | Check iptables/security groups |
SOCKS5 handshake failed | Wrong SOCKS version | Try socks4:// vs socks5:// |
examples/ directories