HTTP/HTTPS
Surfboard supports both standard HTTP proxies and secure HTTPS (HTTP over TLS) proxies for routing traffic.
Protocol Standard
- https://en.wikipedia.org/wiki/HTTP_tunnel
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Methods/CONNECT
- https://en.wikipedia.org/wiki/Proxy_server#Web_proxy_servers
- https://en.wikipedia.org/wiki/Transport_Layer_Security
- https://en.wikipedia.org/wiki/HTTPS
- https://en.wikipedia.org/wiki/Server_Name_Indication
Example
# Standard HTTP proxy without encryption
ProxyHTTP = http, 1.2.3.4, 443, username, password
# Secure HTTPS proxy with TLS and SNI configuration
ProxyHTTPS = https, 1.2.3.4, 443, username, password, skip-cert-verify=true, sni=www.example.com, server-cert-fingerprint-sha256=fac26f65c034829da42d740d23c4a7202475a3834f0ebaecae5f934adbbfd640
Format
{proxy name} = {protocol}, {server}, {port}, {username}, {password}, {skip-cert-verify}, {sni}, {server-cert-fingerprint-sha256}
Parameters
| Name | Value | Mandatory | Note |
|---|---|---|---|
| proxy name | - | true | |
| protocol | http https | true | |
| server | - | true | Supports domain and IP formats. |
| port | 0-65535 | true | |
| username | - | false | |
| password | - | false | |
| skip-cert-verify | true false | false | Applicable if protocol is https. Set to true if the proxy does not have a valid TLS certificate. |
| sni | - | false | Applicable if protocol is https. Definition is unnecessary if the SNI value matches the host value. |
| server-cert-fingerprint-sha256 | - | false | Applicable if protocol is https. SHA-256 fingerprint of the server certificate, hex-encoded (64 characters). Used for certificate pinning. Multiple fingerprints can be comma-separated. |
| underlying-proxy | - | false | Use a proxy or proxy group to connect another proxy (proxy chain). See Common Parameters. |