An external proxy sends the device's outbound traffic through an upstream proxy before it reaches the internet — useful for chaining through another debugging tool, or for making the device appear to browse from a specific country.
What it's for
When the external proxy is on, every upstream connection the VPN tunnel makes is wrapped with an HTTP CONNECT host:port preamble and routed through the proxy you specify. Common uses:
- Chaining through another tool like Charles or Proxyman, or a remote upstream you control.
- Geo-routing — egressing through a proxy in a chosen country, so the device's apparent location matches that region.
The home screen reflects this: under the device name, a flag row shows your real country and, with an external proxy active, an arrow to the proxy's country — so you can confirm at a glance where traffic is actually exiting.
Note: The external proxy only affects VPN-mode egress. It's the tunnel's outbound connections that get wrapped.
Set it in the app
Open Settings → Tunnel → External Proxy:
- Toggle Enable External Proxy on.
- Enter the upstream host (hostname or IP) and port (default
8888). - Optionally add a username and password — sent as a standard
Proxy-Authorization: Basicheader on eachCONNECT. Leave them blank for proxies without authentication.
Tip: After changing the external-proxy settings, restart the VPN so the tunnel extension picks up the new upstream.
Set it from the dashboard
You can also configure the external proxy remotely from the dashboard's Devices tab. Changes push to the device live over Realtime and appear in the in-app form without a reopen.
From the dashboard you can route a device through a country drawn from a managed proxy pool, rather than typing a specific host and port — pick the country and the dashboard fills in the right upstream for you. The device then egresses through that region, and the home-screen flag row updates to match.