Add proxy authentication with username:password format (#4)

* Add golang.org/x/net dependency for proxy support

* Add proxy configuration support for upstream routing

- Support HTTP, HTTPS, and SOCKS5 proxy protocols
- Add proxy authentication with username:password format
- Implement proxy-aware dialers for both HTTP and socket connections
- Add fallback to direct connection when proxy fails
- Include proxy configuration in startup logging
- Support proxy URL and auth via CLI flags and environment variables

* Add proxy configuration examples to deployment files

* Update documentation for proxy configuration feature

* resolve comment

* resolve comment

* resolve comment

* resolve comment

* resolve comment

* resolve comment

* resolve comment

* resolve comment

* resolve comment

* resolve comment

* resolve comment

Author: solitarysp

.env.example

@@ -15,3 +15,8 @@ PROXY_METRICS_PORT=9090
 PROXY_HEALTH_PORT=8081
 PROXY_SHARED_HEALTH_PORT=true
 PROXY_SHARED_METRICS_PORT=true
+
+# Proxy Configuration (optional)
+# PROXY_URL=http://proxy.example.com:8080
+# PROXY_URL=socks5://proxy.example.com:1080
+# PROXY_AUTH=username:password

.github/workflows/docker-build-push.yml

@@ -38,9 +38,9 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: .
-        platforms: linux/amd64,linux/arm64
+        platforms: linux/amd64,linux/arm64,linux/arm64/v8,linux/386,linux/s390x,linux/riscv64,linux/ppc64le,linux/arm/v7
         push: true
         tags: ${{ steps.meta.outputs.tags }}
         labels: ${{ steps.meta.outputs.labels }}
         cache-from: type=gha
-        cache-to: type=gha,mode=max
+        cache-to: type=gha,mode=max

README.md

@@ -135,6 +135,8 @@ variables take precedence when both are provided.
 | `PROXY_HEADER_QUEUES`       | `-header-queues`       | X-Amz-Security-Token | Comma-separated headers for dedicated queues |
 | `PROXY_PERSISTENT_HEADERS`  | `-persistent-headers`  | (empty)              | Persistent headers that cannot be overwritten 🔒 |
 | `PROXY_TIMEOUT`             | `-timeout`             | 0                    | Request timeout in seconds (0 = infinite ⏳)  |
+| `PROXY_URL`                 | `-proxy-url`           | (empty)              | Proxy URL for TARGET_HOST connections 🌐          |
+| `PROXY_AUTH`                | `-proxy-auth`          | (empty)              | Proxy authentication (username:password) 🔐      |
 
 ### Persistent Headers 🔒
 
@@ -183,6 +185,64 @@ export PROXY_PERSISTENT_HEADERS="User-Agent:mobile,X-Custom:always-present"
 ./proxy-queue -target-host=api.example.com
 ```
 
+### Proxy Configuration 🌐
+
+The proxy-queue can route all TARGET_HOST connections through an upstream proxy server. This is useful when your network requires proxy access to reach external services, or when you need to add an additional layer of routing.
+
+#### Supported Proxy Types
+
+| Proxy Type    | URL Format                         | Features                                           |
+|---------------|------------------------------------|----------------------------------------------------|
+| **HTTP**      | `http://proxy.example.com:8080`    | ✅ HTTP requests<br>❌ Socket connections         |
+| **HTTPS**     | `https://proxy.example.com:8080`   | ✅ HTTP requests<br>❌ Socket connections         |
+| **SOCKS5**    | `socks5://proxy.example.com:1080`  | ✅ HTTP requests<br>✅ Socket connections         |
+
+#### Configuration Methods
+
+```bash
+# Command line flags
+./proxy-queue \
+  -target-host=api.example.com \
+  -proxy-url=socks5://proxy.company.com:1080 \
+  -proxy-auth=username:password
+
+# Environment variables
+export PROXY_URL=http://corporate-proxy:8080
+export PROXY_AUTH=myuser:mypass
+./proxy-queue -target-host=api.example.com
+
+# Docker environment
+docker run -e PROXY_URL=socks5://proxy:1080 -e PROXY_AUTH=user:pass proxy-queue
+```
+
+#### Authentication Support
+
+The proxy supports username/password authentication for all proxy types:
+
+```bash
+# Include auth in URL (HTTP/HTTPS only)
+export PROXY_URL=http://username:password@proxy.example.com:8080
+
+# Separate auth parameter (recommended for security)
+export PROXY_URL=socks5://proxy.example.com:1080
+export PROXY_AUTH=username:password
+```
+
+#### Security Features
+
+- **No credential logging**: Proxy authentication is never logged in plaintext
+- **Fallback behavior**: If proxy connection fails, falls back to direct connection
+- **Connection validation**: Invalid proxy URLs are detected and logged
+- **Debug visibility**: Proxy usage is logged at debug level for troubleshooting
+
+#### Proxy vs Direct Connection
+
+| Connection Type | Proxy Required | Fallback Behavior                    |
+|-----------------|----------------|--------------------------------------|
+| **HTTP/HTTPS**  | Optional       | Falls back to direct connection      |
+| **Socket**      | Optional       | Falls back to direct connection      |
+| **Both**        | Optional       | Each connection type handles its own |
+
 ### Header-Based Queue Routing 📤
 
 The proxy supports routing requests to dedicated queues based on specific HTTP headers. This is particularly

build/proxy-queue-darwin-amd64

@@ -2,7 +2,7 @@ version: '3.8'
 
 services:
   proxy-queue:
-    image: thanhlvcom/proxy-queue:latest
+    image: thanhlvcom/proxy-queue:v1.2.0
     ports:
       - "6789:6789"   # HTTP/HTTPS proxy
       - "6799:6799"   # Socket proxy
@@ -23,9 +23,13 @@ services:
       - PROXY_HEADER_QUEUES=X-Amz-Security-Token,Authorization
       - PROXY_PERSISTENT_HEADERS=x-token-test:token-1234
       - PROXY_LOG_LEVEL=info
+      # Optional proxy configuration (uncomment and configure as needed)
+      # - PROXY_URL=http://corporate-proxy:8080
+      # - PROXY_URL=socks5://proxy.company.com:1080
+      # - PROXY_AUTH=username:password
     restart: always
     healthcheck:
-      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:6789/health"]
+      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8081/health"]
       interval: 30s
       timeout: 10s
       retries: 3