dsh-system-proxy
DSH host plugin for policy-based outbound HTTP(S) routing through direct, HTTP(S), or SOCKS proxies.
Install
$ dsh plugin --profile <name> add dsh-system-proxyRepository Intelligence
AI-assisted, source-grounded explanation based on the public repository snapshot. It does not replace compatibility or security verification.
Key Capabilities
- Routes HTTP(S) traffic through direct, HTTP(S), SOCKS4/4a, SOCKS5, or SOCKS5h paths.
- Supports named proxies and routing rules by host, provider, and plugin context.
- Provides direct, proxy, fallback, and block routing actions.
- Can patch global fetch and, when enabled, node:http and node:https request APIs.
- Uses per-host latency EWMA and failure cooldown memory for fallback decisions.
- Offers Settings UI integration and controlled status surfaces through a Cordis service and optional Typert Remote.
- Supports proxy credential references through the DSH credentials service and masks proxy URLs in status output.
- Re-evaluates routing for redirect hops and defaults to direct handling for local, private, link-local, and metadata endpoints.
Useful For
- Route selected LLM provider endpoints through a SOCKS or HTTP proxy.
- Keep specified hosts or private-network destinations direct while proxying other traffic.
- Add cautious direct-first fallback for safe request methods when direct connectivity fails.
- Block outbound requests to configured hosts locally.
- Apply routing rules to requests whose calling plugin or provider explicitly supplies route context.
Who It Fits
- DeepSeek Harness profile administrators
- DSH plugin developers
- Users operating DSH in networks with multiple proxy routes or restricted egress
Documented Limitations
- It is a process-level global patch; competing transport-wrapping plugins should not be loaded in the same process.
- Provider and plugin routing context is not inferred automatically; callers must supply it through the plugin service.
- SOCKS4 and SOCKS4a cannot address IPv6 targets and fail explicitly for that combination.
- Fallback is deliberately restricted: POST is not replayed by default, and requests are not retried after response headers or SSE bytes arrive.
- Fallback latency thresholds influence routing for later requests rather than interrupting an active SSE stream.
- Cordis loader config replacement is whole-config rather than a deep merge.
- With plaintext HTTP requests and DEBUG=*, the http-proxy-agent dependency may write upstream request headers to stderr.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 7 runtime, 5 development, 10 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
package.json declares 7 runtime, 5 development, 9 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
package.json declares 10 runtime, 5 development, 1 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
package.json declares 7 runtime, 5 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Traceable source and registry metadata for this entry, kept separate from runtime verification.
- Source repository
- khiqwq/dsh-system-proxy
- Registry source
- Public GitHub repository
- Source snapshot
- f915510f6a55
- Artifact type
- plugin
- AI enrichment
- gpt-5.6-terra · 2026-08-14
- Prompt version
- dsh-plugin-enrichment-v3
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 2
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-08-14
- Last release
- —
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Telegram mobile remote for attaching to live DeepSeek Harness Web sessions.
View plugin →Connects a WeCom AI Bot to persistent DeepSeek Harness agents for text, images, files, commands, and session-based conversations.
View plugin →A DeepSeek Harness MCP server manager that adds a Settings → MCP page for HTTP and local stdio servers.
View plugin →A DSH web plugin that records per-message token costs, displays billing summaries, and fetches DeepSeek account balances in CNY or USD.
View plugin →