kernel.org:80 -> iptables -> localhost:xxx -> tcp connect proxyhost proxyport -> http connect proxyhost2 proxyport2 http connect kernel.org:80