the reference SOCKS4 and SOCKS5 proxy server, secure by default with per deployment authentication
Dante is a mature, lightweight SOCKS4 and SOCKS5 proxy server from Inferno Nettverk. It lets clients route outbound TCP and UDP traffic through a single controlled gateway, with source access rules, username and password authentication and detailed logging, all from one small headless daemon.
cloudimg ships Dante secure by default: SOCKS authentication is mandatory, a unique proxy username and password are generated on first boot rather than baked into the image, and access is restricted to private client ranges so it is never an open relay. The image is built from the verified upstream source, kept fully patched, and backed by 24/7 support.