How a proxy works#
Your client opens a connection to the proxy, states the destination (a CONNECT host:port for HTTPS, or the full URL for plain HTTP), and the proxy opens its own connection to that destination. Everything that follows is copied byte for byte in both directions. TLS still runs end to end between your client and the website: a well-behaved proxy never decrypts it.
What changes for the destination#
- The source IP address is the proxy's exit address, with its geolocation, its provider and its reputation.
- The TCP path is longer, so latency grows by the distance between you, the proxy and the target.
- Nothing else changes unless the proxy adds headers. A transparent corporate proxy may add
ViaorX-Forwarded-For; a proxy meant for privacy adds nothing.
Forward, reverse, and what proxy providers sell#
A forward proxy sits in front of clients and speaks to many destinations; this is what proxy providers sell. A reverse proxy sits in front of servers and receives traffic on their behalf (load balancers, CDNs). Commercial proxy networks differ mainly by where the exit address lives: a household (residential), a consumer ISP block hosted in a facility (ISP), a hosting range (datacenter) or a cellular carrier (mobile).
How it works at ProxShift#
ProxShift runs forward proxies of all four kinds behind two gateways (res.proxshift.com and mob.proxshift.com on ports 9000 and 9001) and as dedicated ip:port addresses. The gateway never terminates TLS, strips proxy headers and adds none.
Questions people ask#
Is a proxy the same as a VPN?
No. A VPN tunnels all traffic of a device at the network layer; a proxy is configured per application or per request and only carries what you send through it. Proxies are the tool when you need many addresses, per-request location changes or thousands of parallel connections.
Does a proxy hide my identity?
It hides your IP address from the destination. It does not change cookies, browser fingerprints or account logins; those must be handled separately.