== Enclave dedicated-IP egress demo ==

ports (NAN_PORTS):  http:8000=33217,tcp:7777=46609
egress (NAN_EGRESS): socks5h://0x011a2a5bd849117c6a16a527d2c698be51511bb1817f22993ea91d8a9e69ec55:****@127.0.0.1:1080

[1][2] explicit egress probe failed: CONNECT refused (rep=3)
[3] transparent fetch failed: Socket not connected (os error 53)
    -> with NAN_EGRESS set this means the raw network is closed but the front was unreachable

[4] loopback dial 127.0.0.1:8080: DENIED (Permission denied (os error 2)) — raw network closed ✓
[4b] same dial via connect_timeout: phantom Ok, first I/O fails (Socket not connected (os error 53)) — denial holds

On an egress-enabled enclave with the phase-2 toolchain: [1] == [2] == [3],
[4] denied — one stable IPv6 identity in both directions (this page is served
on that same address via the tcp6-relay), with no way to egress off-identity.