What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Use Dante as a locked-down SOCKS5 gateway, not an open relay. On a Debian- or Ubuntu-family VPS, install the dante-server package, bind the daemon to the intended listening address, set a separate public egress address, require username authentication, allow only trusted source IPs, and repeat those restrictions in both your VPS firewall and Dante rules. Validate the file with danted -V before restarting, then test from an approved computer with a SOCKS5-aware client.
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
This arrangement is useful for game launchers, development tools, and other applications that need a stable outbound address, but it does not encrypt traffic between your computer and the VPS. Protect the proxy as carefully as you would any Internet-facing service.
As an Amazon Associate I earn from qualifying purchases.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →What Dante does and why the two-stage policy matters
Dante is a SOCKS proxy daemon. It can relay TCP and UDP traffic and can act as a firewall-like control point between networks. A client connects to Dante, asks to reach a destination, and Dante makes the outbound connection using the VPS’s external interface.
Every request passes two separate policy stages:
- Client rules decide whether the source address may connect to the proxy at all.
- SOCKS rules decide whether an admitted client may use a particular command, destination, and protocol.
Keeping these stages separate makes troubleshooting clearer. A client blocked at the first stage never reaches SOCKS authentication or destination checks. A client that passes the first stage can still be denied because, for example, only TCP connect requests are allowed.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
A safe public-VPS design normally combines a source-IP allowlist with SOCKS5 username authentication. Do not use an unrestricted client pass and socks pass policy. An accidentally open proxy can be abused for scanning, spam, account attacks, or traffic that gets your VPS address blocked.
Plan the deployment before installing anything
Choose the interfaces and addresses
Identify the VPS’s private or listening address and its public address used for outbound connections. On a single-interface VPS these may map to the same network device, but Dante still needs the correct values for internal and external. The listening port in the example below is 1080; choose another port if it fits your policy, but use the same value in both firewalls and clients.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallUse a fixed source address for each trusted computer whenever possible. If your home connection changes addresses, use a tightly controlled VPN or update the allowlist when the address changes rather than opening the proxy to the entire Internet.
Keep administration separate
SSH administration and proxy access are different trust relationships. Keep SSH restricted to your administrative addresses, create a dedicated unprivileged service identity when the package does not create one, and never reuse the VPS root password as the SOCKS password.
Decide whether UDP is really needed
Dante supports TCP and UDP, but many web and game-related tools only need TCP. Allowing only TCP connect requests gives you a smaller attack surface. Add UDP only for an application that demonstrably requires it, and then restrict the destinations and source addresses as narrowly as practical.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Install Dante on Debian or Ubuntu
- Connect to the VPS over SSH using your normal administrative account.
- Update the package index and installed packages:
sudo apt update sudo apt upgrade - Install the distribution package:
sudo apt install dante-server - Inspect the package’s service unit and configuration arguments instead of assuming a path:
systemctl cat danted systemctl status danted
Package naming and service-unit paths vary by distribution release. The installed unit file and the local danted(8) and danted.conf(5) manuals are authoritative for the file location, command-line options, and accepted directive spelling on your VPS.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Create a dedicated proxy account
If the package did not create a suitable account, create a system user with no interactive shell. The exact account-management command depends on the distribution; the important properties are that it is not root, it is used only for proxy authentication, and its password is long and random. Store that credential in your password manager and do not place it in scripts or game configuration files that other users can read.
Build the Dante configuration in layers
Start with global settings, then add ordered client rules, followed by ordered SOCKS rules. Rules are evaluated in order, so put specific allow rules before broad block rules.
# Illustrative structure. Replace the example addresses with your VPS values.
internal: 10.0.0.10 port = 1080
external: 203.0.113.10
method: username
clientmethod: none
socksmethod: username
client pass {
from: 198.51.100.24/32 to: 0.0.0.0/0
}
client block {
from: 0.0.0.0/0 to: 0.0.0.0/0
}
socks pass {
from: 198.51.100.24/32 to: 0.0.0.0/0
command: connect
protocol: tcp
}
socks block {
from: 0.0.0.0/0 to: 0.0.0.0/0
}The addresses 10.0.0.10, 203.0.113.10, and 198.51.100.24 are documentation examples. Replace them with the actual listening address, public egress address, and trusted client address. If your VPS has several interfaces, do not guess which address Dante should use.
Global directives
internalselects the address and port on which Dante accepts client connections.externalselects the address Dante uses for outbound connections.method,clientmethod, andsocksmethoddefine authentication behavior. Use the exact combinations accepted by your installed version’s manual.- Logging and timeout directives should be added for operations; their spelling and available values are version-sensitive.
Dante documents that the default socksmethod is no method, which blocks SOCKS requests. Set the method deliberately rather than relying on a permissive default.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Client rules: the first gate
The example admits only one IPv4 address and then blocks every other source. For several trusted addresses, add one client pass block per address or approved range before the final block. Prefer IP addresses in client rules when possible: they avoid ambiguity and are generally more efficient than hostname-based matching.
SOCKS rules: the second gate
The sample permits only the connect command over TCP. A SOCKS rule can also select destination ranges, commands, and protocols. If a game launcher needs UDP, add a separate, narrowly scoped rule after confirming the requirement; do not change the entire policy to unrestricted TCP-and-UDP access merely because one application failed.
Exact keywords and address syntax can be version-sensitive. Treat the sample as a policy layout and reconcile every directive with the danted.conf(5) manual installed on your VPS.
Configure username authentication
Dante’s documented username method checks the system password file. Create the dedicated system user, assign a unique password, and set socksmethod: username. The client must select SOCKS5 and send those credentials.
SOCKS4 cannot carry username/password authentication. If a client is set to SOCKS4, it may connect to the port but will not be able to complete the required authenticated SOCKS5 negotiation.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Do not confuse the Dante account with SSH credentials. A proxy-only account should not have administrative privileges, an interactive shell, or a password reused anywhere else. Remove or rotate it when a device is retired.
Restrict the VPS and host firewalls
Apply the same source restriction in both layers:
- Provider firewall: allow TCP port
1080only from the trusted client addresses. Keep SSH on its own restricted rule. - Host firewall: repeat the allowlist with the firewall used by your distribution, such as nftables or UFW, and deny other traffic to the proxy port.
- Dante: retain the matching
client passand finalclient blockrules.
Defense in depth matters. If a provider rule is accidentally widened, Dante’s client gate still prevents an open relay. If a Dante rule is edited incorrectly, the network firewall remains a second barrier.
Do not expose the listening port on every interface unless that is intentional. Binding to the required listening address reduces accidental exposure, but it does not replace firewall rules.
Validate the file before starting or restarting
- Run Dante’s verification mode, supplying the configuration file with
-fwhen the service unit uses a non-default path:sudo danted -V sudo danted -V -f /path/to/danted.conf - Fix every parse error before touching the running service. Check spelling, braces, address notation, and directive values against the local manual.
- Restart only after validation succeeds:
sudo systemctl restart danted sudo systemctl status danted - Confirm that the process is listening only where intended. Use the socket-inspection utility available on your system, such as:
sudo ss -lntup | grep 1080
The verification command checks configuration syntax; it does not prove that a firewall permits the traffic, that credentials are valid, or that an outbound destination accepts the connection. Those require an end-to-end test.
Test from a laptop or game machine
Test an authenticated SOCKS5 connection
Use a tool that explicitly supports SOCKS5 username/password authentication. With a command-line HTTP client, the pattern is:
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
curl --socks5-hostname proxy-user:[email protected]:1080 https://example.com/The --socks5-hostname form asks the proxy to resolve the destination name, which avoids leaking DNS lookups from the client when the tool supports that behavior. Substitute your real account, password, address, port, and test URL. Do not paste a real password into shell history on a shared machine.
Recommended Free Tools
Check the egress address
Request an IP-echo service that you trust and verify that it reports the VPS’s public address, not the laptop’s address. This confirms that the request traversed Dante, but it does not by itself prove that every application is using the proxy.
Test each denial path
- From an unlisted source address, confirm that the client connection is rejected.
- With an allowed source, attempt SOCKS4 and confirm that it fails when username authentication is required.
- Attempt a UDP request if your policy is TCP-only; it should be denied.
- If you added destination restrictions, test one permitted and one denied destination.
Perform these tests from a separate network when possible. Testing only from the allowlisted laptop cannot reveal an accidentally broad client rule.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Enable logging and prevent stalled sessions
Send logs to syslog or to a dedicated file, and enable the connection, disconnection, error, and I/O events that are useful in your environment. Set connection and negotiation timeouts so abandoned clients do not consume resources indefinitely. Dante documents these logging destinations, event selectors, and timeout controls; use the directive spelling and values in the manual installed with your version.
When investigating a failure, correlate the timestamp, source address, requested destination, command, and protocol. A client-rule denial and a SOCKS-rule denial are different events and point to different fixes. Rotate or limit log files so diagnostics do not fill the VPS disk, and avoid logging secrets.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteCommon failures and precise fixes
The client cannot open the proxy port
- Check that
dantedis active and thatssshows the expected listening address and port. - Compare the client address with the provider firewall allowlist and host-firewall rule.
- Confirm that the client is connecting to the VPS address bound by
internal, not to an unused interface. - Review logs for a client-rule block before changing authentication settings.
Authentication fails immediately
- Ensure the application is set to SOCKS5, not SOCKS4 or HTTP proxy mode.
- Verify that the username exists in the VPS system account database and that its password is current.
- Check that
socksmethodis set tousernameand that the client is actually sending credentials. - Make sure the account is not locked or restricted by local password policy.
The proxy accepts a client but cannot reach destinations
- Inspect the
externaladdress and confirm that the VPS can route outbound traffic through it. - Check ordered
socks passandsocks blockrules, including destination, command, and protocol selectors. - Verify that the application needs TCP
connectrather than UDP or another SOCKS command. - Review timeout values and logs for failed DNS resolution or stalled outbound handshakes.
The service will not restart after an edit
Run danted -V with the same configuration file used by the service. A missing brace, unsupported keyword, or invalid address can stop the daemon from parsing the file. Compare the failing directive with the installed manual instead of copying syntax from a different Dante release.
Other people can use the proxy
Treat this as an incident. Immediately stop or firewall the listening port, inspect provider and host-firewall rules, restore a final catch-all client block and socks block, rotate the proxy password, and review logs for unknown source addresses and destinations. Re-test from an untrusted network before reopening access.
Choosing an access policy
| Policy choice | What it provides | When it fits | Important limitation |
|---|---|---|---|
| SOCKS4 | Basic SOCKS proxying without username/password authentication | Only legacy, separately protected environments | Cannot carry the credentials required by Dante’s username method |
| SOCKS5 with username authentication | Authenticated SOCKS negotiation and support for Dante’s system-account method | Internet-facing VPS access for trusted users | Still needs source-IP restrictions and firewalls; SOCKS itself is not encryption |
| IP allowlist only | Admission based on source address | Stable office, home, or site-to-site addresses | Weak when client addresses change or are shared |
| Username authentication plus IP allowlist | Two independent access checks | Preferred layered policy for a public VPS | Requires account lifecycle and password management |
| TCP-only | Allows TCP connect requests |
Web browsing, downloads, and tools that do not require UDP | UDP-dependent applications will fail until an explicit UDP rule is added |
| TCP plus UDP | Supports workloads that require both protocols | Only when the application requirement is confirmed | Broadens the permitted traffic and needs additional testing |
Operate the proxy safely over time
- Review the allowlisted source addresses whenever a device, office, or home connection changes.
- Rotate the dedicated proxy password after staff or device changes and remove unused accounts.
- Keep the operating system and Dante package updated through the distribution’s normal security process.
- Watch logs for repeated authentication failures, unexpected destinations, and source addresses outside your inventory.
- Re-run configuration validation after every edit and keep a known-good copy of the last working file.
- Document whether each permitted application uses TCP, UDP, or both so a later rule change does not silently broaden access.
For gaming, configure the individual launcher or game only if it supports authenticated SOCKS5. Some games ignore system proxy settings or require UDP, so a successful browser test does not guarantee that a particular title will use Dante. If the game cannot select SOCKS5 credentials, do not weaken the proxy policy just to force compatibility.
Quick Recap
Final verification checklist
- The package and service path were confirmed on the installed Debian- or Ubuntu-family release.
internallistens on the intended address and port, andexternalnames the correct egress address.- A dedicated non-root proxy account has a unique, long password.
- SOCKS5 username authentication is configured and the client is set to SOCKS5.
- Specific
client passrules precede a catch-allclient block. - Specific
socks passrules precede a catch-allsocks block. - The provider firewall and host firewall allow the port only from trusted source addresses.
danted -Vsucceeds with the service’s configuration file.- An allowed client sees the VPS egress address, while an unlisted client and unauthorized protocol are denied.
- Logs, connection events, and timeouts are enabled and monitored.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
