Dice Proxy

Overview

Dice Proxy is a proxy/IP reselling platform: buy GB/IP wholesale from suppliers and resell at a markup, with the money paths built so a customer can never be charged for something that can't be delivered, and the platform can never sell below its own cost. That last sentence isn't marketing copy — it's a set of invariants proven by integration tests against a real Postgres database.

Key Features

• Prepaid wallet with an immutable ledger — balance always equals the sum of ledger entries, proven live via an admin reconciliation query, not just assumed.
• Pluggable supplier adapters behind a single port interface — DataImpulse live-verified in production, Webshare and LokiProxy written and tested but held off until their accounts are purchased. Adding a new supplier is one adapter file, no database migration.
• Server-side checkout re-pricing with a KYC gate, live supplier cost quote, and a margin floor that refuses any sale priced below cost — before any charge happens, not after.
• Coupons and an affiliate program — percent/fixed discounts with spend minimums and usage caps redeemed under a row lock (never oversells a cap), and referral commissions credited only on orders that actually fulfil.
• Live proxy self-service — connection details, password rotation, IP allow-listing, and a real-time myProxyUsageUpdated GraphQL subscription streaming byte-usage as it happens.
• PDF invoices for every order and top-up, plus an admin console for catalog/provider management, margin and revenue reporting, and a full audit log.

Technical Highlights

• Ports-and-adapters architecture for every vendor touchpoint — provisioning suppliers, payment providers, email, KYC, error reporting — so a vendor swap is a drop-in, not a refactor.
• A payment webhook credits a wallet exactly once, even if the webhook is replayed, via row locking and event dedupe; a failed provisioning attempt is refunded automatically and structurally cannot become revenue or pay a commission.
• Sandbox-by-default provisioning driver — every dev machine and CI run fulfils orders through a mock adapter unless a deliberate env flag switches it to live, so there's no accidental real-money call from a dev environment.
• Its own crypto top-up path is a client integration of the sibling Dice Payment Gateway project, with a webhook-first, poll-as-fallback settlement strategy (checks at 5s → 10s → 20s → 40s → 60s → 2min) for the gap where webhooks aren't guaranteed to arrive.

Impact

The money-safety invariants — no oversell, no sub-cost sale, exactly-once crediting, automatic refund on failed provisioning — are what make a proxy resale business survivable at the margins this market runs on, and they're enforced by the database and tested against it, not just documented as a policy.