A tool for running an application in an isolated network namespace, with external network access only through a SOCKS proxy.