Proxy Bastion: hand out revocable proxy links, not credentials

What it does

One gateway in front of proxies you already pay for.

Issue a link with an expiry, a traffic ceiling and a kill switch.

Group upstreams so one dead member does not take the link down.

Cut latency on the relay path.

Pick how a pool routes, per link.

Keep our relay reachable when networks fingerprint and drop plain proxies.

See what each link consumes.

Add the http and https proxies you already pay for. We do not sell IPs.

Group them into a failover pool and issue a per-recipient link with an expiry and a cap.

The recipient gets relay://<linkId>:<secret>@<relay host> and nothing else.

Being straight about this is cheaper than having you find out later.

We do not sell proxies, and we do not fix an upstream IP a destination has already banned.
This release accepts http and https upstreams only, not socks5.
A revoked link can stay usable for up to about 60 more seconds while the edge cache expires.
The traffic cap is not enforced in real time: usage is written back periodically, so the ledger can lag by up to about five minutes and a cap can be overrun.
The link is the whole credential. A forwarded link works for whoever holds it, so you cannot attribute use past the person you gave it to.
Upstream proxy passwords are stored in plain text so we can forward them.