# Socks Proxy noProxy Format

**URL:** <https://forums.balena.io/t/socks-proxy-noproxy-format/346457>\
**Category:** Product support\
**Tags:** network\
**Created:** [August 30, 2021, 1:03pm UTC](https://forums.balena.io/t/socks-proxy-noproxy-format/346457 "2021-08-30T13:03:13Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![adamp](https://avatars.discourse-cdn.com/v4/letter/a/b19c9b/32.png) [@adamp](https://forums.balena.io/u/adamp)\
**Post date:** [August 30, 2021, 1:03pm UTC](https://forums.balena.io/t/socks-proxy-noproxy-format/346457/1 "2021-08-30T13:03:14Z")

</div>

Hello,

We have IoT devices in regions that prevent Balena VPN from establishing connection. In order to get around this we have a socks5 proxies running. The proxy is working great to enable Balena VPN connectivity but I would like to disable proxying some services that utilize AWS Global Accelerator. Based on the documentation, I can supply a list of addresses not to proxy via noProxy: [Balena API Proxy](https://www.balena.io/docs/reference/supervisor/supervisor-api/#patch-v1devicehost-config)

If I place an address with a wildcard prefix, it causes Balena VPN connection to fail (devices show heart beat only). If I remove just the noProxy with empty list, the VPN connection is restored.

Below is essentially what the body of the request looks like. We have a number of APIs at different subdomains that I’d like to bypass the proxy (files.test.company.services, service.test.company.services).  
Am I using noProxy incorrectly?

```auto
{
  "network": {
    "proxy": {
      "type": "socks5",
      "ip": "SOCKS_PROXY_ADDRESS",
      "port": 1080,
      "login": "SOCKS_LOGIN",
      "password": "SOCKS_PASSWORD",
      "noProxy": [
        "*.company.services"
      ]
    }
  }
}

```

---

<div class="post-metadata">

**Author:** ![nitish](https://avatars.discourse-cdn.com/v4/letter/n/34f0e0/32.png) [@nitish](https://forums.balena.io/u/nitish)\
**Post date:** [September 3, 2021, 3:47pm UTC](https://forums.balena.io/t/socks-proxy-noproxy-format/346457/2 "2021-09-03T15:47:41Z")

</div>

Hi @adamp,

I was looking at the documentation link you pointed out, and as I see we allow a list of IP/subnet not hostnames. Ref from the doc below:

> The “noProxy” setting for the proxy is an optional array of IP addresses/subnets that should not be routed through the proxy. Keep in mind that local/reserved subnets are already excluded by balenaOS automatically.

Link: [Interacting with the balena Supervisor - Balena Documentation](https://www.balena.io/docs/reference/supervisor/supervisor-api/#patch-v1devicehost-config)

Can you try a specific IP and see if that lets you establish the connection?

Regards,  
N

---

<div class="post-metadata">

**Author:** ![ab77](https://sea2.discourse-cdn.com/balena/user_avatar/forums.balena.io/ab77/32/2870_2.png) [@ab77](https://forums.balena.io/u/ab77)\
**Post date:** [October 14, 2021, 6:21pm UTC](https://forums.balena.io/t/socks-proxy-noproxy-format/346457/4 "2021-10-14T18:21:20Z")

</div>

Hi there, can you try specifying your proxy endpoint IP as well as the wildcard exclusion:

> <https://github.com/balenalabs/proxy-tunnel/blob/master/balena.sh#L30>

The above project which automatically configures a device by excluding the proxy IP itself, to prevent a loop.

---

<div class="post-metadata">

**Author:** ![markcorbinuk](https://sea2.discourse-cdn.com/balena/user_avatar/forums.balena.io/markcorbinuk/32/4771_2.png) [@markcorbinuk](https://forums.balena.io/u/markcorbinuk)\
**Post date:** [November 4, 2021, 4:15pm UTC](https://forums.balena.io/t/socks-proxy-noproxy-format/346457/7 "2021-11-04T16:15:00Z")

</div>

Hello @adamp

Did you have any luck trying the IP configuration suggestions made by my colleagues?

Regards - Mark