A transparent proxy intercepts traffic without the client being explicitly configured for it — the network transparently routes through it.
Explanation
On a hotel Wi-Fi, café network, or ISP that redirects HTTP traffic to a captive portal, you are already using a transparent proxy — you did not configure your device for it, but the network is routing your traffic through one. Transparent proxies are used for caching, content filtering, ad injection, and lawful interception. Because the client never chose the proxy, transparent proxies can only work on protocols where the destination server can be identified without prior negotiation — plain HTTP is easy; HTTPS is harder (the client validates the certificate). Enterprises deploy transparent proxies with company root certificates installed on managed devices to allow HTTPS interception. Public transparent proxies without cert injection can only see the destination hostname via TLS SNI, not the request contents.
Related terms