AnyProxy

Get Pro
Glossary · Core proxy

Transparent proxy

Also calledintercepting proxyinline proxy
Definition

A transparent proxy is one the network puts in your path without you setting it up; on proxy lists the same word means a proxy that passes your real IP along.

Explanation

In depth

The word has two meanings, and they are easy to mix up. In networking, a transparent or interception proxy is one you never configured: the router or ISP quietly sends your traffic through it. Hotel and airport Wi-Fi that shows a login page before anything else works this way, and some ISPs use the same trick for caching, filtering or inserting notices. Plain HTTP is easy to intercept. HTTPS is not, because your browser checks the site's certificate, so an interception proxy can usually only see the site name and block or allow the connection, unless the device trusts a certificate it controls, as managed company laptops often do. On free-proxy lists, transparent means something else: a proxy that forwards your real IP address to the site in a header such as X-Forwarded-For. It hides nothing. That is the lowest rung of the transparent, anonymous, elite scale. Either way the lesson is the same: a proxy you did not choose works for whoever put it there, and a proxy labelled transparent does not hide you.

In practice

Transparent proxy in the real world

RFC 3040 calls this an interception proxy. Captive portals are the everyday case, and some ISPs do the same to DNS: Telkom Indonesia's IndiHome has been reported to answer queries sent to any DNS server on port 53 itself, which is why changing to 8.8.8.8 does not get around its filter. A web proxy reached over HTTPS sits on top of all this: the network can see that you connected to the proxy's domain, but not which pages you opened through it.

Sources: RFC 3040 - Web replication and caching taxonomy

Questions about Transparent proxy

How do I know if I am behind a transparent proxy?
Signs include a login page appearing before any site loads, certificate warnings on sites that normally work, or DNS answers that ignore the server you set.
Does HTTPS stop transparent proxies?
It stops them reading or changing page content, unless your device trusts their certificate. They can still block connections by site name or intercept DNS.

Related terms

ProxyA proxy is a server that makes network requests for you and passes the answers back, so the site you reach deals with the proxy instead of your device.Forward proxyA forward proxy works for the user: it sends your requests out to the internet for you, so sites see the proxy instead of you.TLS SNISNI (Server Name Indication) is the field at the start of an HTTPS connection where your browser names the site it wants, usually in readable text.MITM (Man-in-the-Middle)A man-in-the-middle (MITM) is anything that sits between you and a website and can read or change the traffic, whether as an attack, as company policy or as a service you chose.

Put the concept to work

Try AnyProxy free — no install, no signup, six regions.

Open a blocked page