lupin.Open console
Proxies

Configure an HTTP or SOCKS proxy client from returned details

Use the connection block, keep credentials out of URLs where practical and distinguish proxy protocol from destination HTTPS.

Start with the returned connection block

Lupin's live proxy creation response can provide host, port, username, password and a schemes list containing http and socks5. Use that exact endpoint information for the configured resource. Do not copy an upstream provider's example host and port into a white-label integration and assume it represents the returned user's configuration. If the connection block is absent or incomplete, resolve provider readiness and field mapping before testing. The local log provider does not prove real network access. A management API response and a successful proxied request are separate stages that need separate evidence.

Distinguish the proxy hop from the destination

A request to an HTTPS destination can use an HTTP proxy through a tunnel; the destination scheme does not by itself determine the proxy's own connection scheme. Likewise, SOCKS5 is a different client protocol rather than an alternate spelling for HTTPS. Choose a mode your HTTP library actually supports and keep certificate verification enabled for the destination. Do not solve an authentication or reachability error by disabling TLS checks. The returned schemes are the product contract to begin with; a broader upstream protocol catalog does not guarantee every mode or port is exposed through this Lupin resource.

Configure authentication deliberately

For curl, proxy endpoint selection and proxy authentication have separate options. Keeping username and password out of the proxy URL can reduce accidental copying into URL logs, though command arguments and process inspection can still expose credentials. In an application, use its secret store and proxy configuration fields rather than assembling a reusable plaintext URL in ordinary telemetry. Handle special characters according to the client library's rules. A value that is valid as a password is not automatically safe when concatenated into a URL, shell command or configuration file without the appropriate encoding and quoting.

Illustrative request; source reviewed, not executed against a live provider.
curl --proxy "http://$PROXY_HOST:$PROXY_PORT" \
  --proxy-user "$PROXY_USER:$PROXY_PASSWORD" \
  --connect-timeout 10 --max-time 20 \
  https://example.com

Choose DNS behavior intentionally for SOCKS

Some clients distinguish resolving the destination locally from asking the SOCKS proxy to resolve it. Curl exposes that distinction through its SOCKS options and schemes. Select the behavior the application requires and verify the client documentation instead of assuming all SOCKS5 integrations resolve names identically. That choice can affect what your local network observes and which destination address is contacted. Keep the test small and within the approved traffic budget. A proxy is a network route, not a guarantee that the destination site permits the operation or that its access controls can be ignored.

Verify each layer separately

Begin with endpoint reachability and authentication, then verify the intended public destination and returned content. Bound request time and record a sanitized error category. Authentication failure, exhausted traffic, thread limits and destination connection failures need different remedies. Do not recreate the proxy user or top it up merely because one client request failed. Preserve the original allocation identity and inspect the relevant resource state with awareness that configured auto-refill can allocate more traffic during synchronization. Once the approved task ends, stop client requests and follow the supported operator lifecycle for any further policy or credential changes.

Sources & verification

Reviewed against the current Lupin route, provider adapter and shared input contracts, plus the linked official references. Examples were not run against live services.

Prepared with AI assistance by Lupin editorial. How we research and maintain these guides.

Put it into practice

Give your agent the right tools.

Review the API, workspace requirements and permissions before enabling a workflow.

Explore proxies