I've encountered both http_proxy
and HTTP_PROXY
. Are both forms equivalent? Does one of them take precedence over the other?
7 Answers
There is no central authority who assigns an official meaning to environment variables before applications can use them. POSIX defines the meaning of some variables (PATH
, TERM
, …) and lists several more in a non-normative way as being in common use, all of them in uppercase. http_proxy
and friends isn't one of them.
Unlike basically all conventional environment variables used by many applications, http_proxy
, https_proxy
, ftp_proxy
and no_proxy
are commonly lowercase. I don't recall any program that only understands them in uppercase, I can't even find one that tries them in uppercase. Many programs use the lowercase variant only, including lynx, wget, curl, perl LWP, perl WWW::Search, python urllib/urllib2, etc. So for these variables, the right form is the lowercase one.
The lowercase name dates back at least to CERN libwww 2.15 in March 1994 (thanks to Stéphane Chazelas for locating this). I don't know what motivated the choice of lowercase, which would have been unusual even then.
-
5
Unlike basically all conventional environment variables used by many applications, http_proxy, https_proxy, ftp_proxy and no_proxy are commonly lowercase. I don't recall any program that only understands them in uppercase
-> For the record, I just found out that docker 17.04.0-ce only honors NO_PROXY.– jaumeNov 29, 2017 at 7:50 -
1cloudformation scripts (cfn-signal, cfn-init) use the uppercase variant
HTTPS_PROXY
. docker also uses the uppercase variant. Oct 9, 2018 at 5:24 -
lower case would not work for me, when trying to add a ppa repository.
sudo -E apt-add-repository ppa:xxxxx/xxxx
. i had tounset https_proxy
andexport HTTPS_PROXY=http://a.b.c.d:xxxx
– MheniApr 22, 2019 at 20:35 -
3Curl explicitly uses lowercase
http_proxy
because of exploits where that environment variable was set by attackers when CGI scripts were being run...– AnonMay 18, 2020 at 14:58 -
1
There is no standard and both uppercase and lowercase versions are used depending on the application (also see HTTPS_PROXY, ALL_PROXY, NO_PROXY).
For example:
curl
ENVIRONMENT VARIABLES
Curl reads and understands the following environment variables:
http_proxy, HTTPS_PROXY, FTP_PROXY
They should be set for protocol-specific proxies. General proxy should be
set with
ALL_PROXY
A comma-separated list of host names that shouldn't go through any proxy is
set in (only an asterisk, '*' matches all hosts)
NO_PROXY
git
http.proxy
Override the HTTP proxy, normally configured using the http_proxy, https_proxy,
and all_proxy environment variables (see curl(1)). [..]
Python
urllib.request.getproxies()
supports both lowercase and uppercase variants.
It also mentions a security issue:
If the environment variable REQUEST_METHOD is set, which usually indicates your script is running in a CGI environment, the environment variable HTTP_PROXY (uppercase _PROXY) will be ignored. This is because that variable can be injected by a client using the “Proxy:” HTTP header. If you need to use an HTTP proxy in a CGI environment, either use ProxyHandler explicitly, or make sure the variable name is in lowercase (or at least the _proxy suffix).
Some applications allow NO_PROXY
to contain stars/ip-ranges while others do not.
So
export https_proxy=$http_proxy HTTP_PROXY=$http_proxy HTTPS_PROXY=$http_proxy NO_PROXY=$no_proxy
should have you covered.
-
Thanks for mentioning the security issue. But otherwise, for good measure, I guess we should add ALL_PROXY and all_proxy to that list of exports. And maybe FTP_PROXY and ftp_proxy too. Aiyaah! Jul 16, 2020 at 21:14
WGET - is only using the lowercase proxy settings!
-
From wget sources: http_proxy, https_proxy, ftps_proxy, ftp_proxy. But doesn't support all_proxy and no_proxy (but there is an option --no_proxy) May 10, 2022 at 7:28
Most applications seem to support upper case variables, and others support lower case. I think some of the confusion comes from the curl
removing support for HTTP_PROXY as it could be set via an HTTP Proxy:
header in a CGI-BIN or PHP-type environment. Source code from curl:
https://github.com/curl/curl/blob/30e7641d7d2eb46c0b67c0c495a0ea7e52333ee2/lib/url.c#L2250-L2266
GitLab Blog post describing this madness:
https://about.gitlab.com/blog/2021/01/27/we-need-to-talk-no-proxy/
You can use this script to manage shell proxy on the go...
set_proxy() {
type="$1"
host="$2"
port="$3"
user="$4"
pass="$5"
if [[ -n "$user" ]]; then
export http_proxy="$type"://"$user":"$pass"@"$host":"$port"
else
export http_proxy="$type"://"$host":"$port"
fi
export HTTP_PROXY=$http_proxy
export https_proxy=$http_proxy
export HTTPS_PROXY=$http_proxy
export ftp_proxy=$http_proxy
export FTP_PROXY=$http_proxy
export all_proxy=$http_proxy
export ALL_PROXY=$http_proxy
echo "$http_proxy"
}
unset_proxy() {
unset http_proxy
unset HTTP_PROXY
unset https_proxy
unset HTTPS_PROXY
unset ftp_proxy
unset FTP_PROXY
unset all_proxy
unset ALL_PROXY
}
for example to set a proxy, run
set_proxy socks5 127.0.0.1 10802
to disable proxy, run
unset_proxy
The convention is to use all capps environment variables when exporting them, so that when you are writing shell scripts you can use lowercase variable names without worrying about name collisions with other programs. Of course this is a convention only, there is no technical restriction on limiting the names of environment variables so the lowercase version could be used in some cases, but best practice is upper case, and remember that they are case sensitive so they could have different values.
-
1Unlike most (basically, all) conventional environment variables,
http_proxy
and its siblings are usually lowercase. Jun 29, 2015 at 22:42 -
-
5No, it isn't. You're right that there's a convention to use uppercase for environment variables, but it's only a convention, not an absolute rule. The de facto standard for the environment variables
http_proxy
and friends is to be spelled in lowercase, in violation of a convention. For an application to useHTTP_PROXY
would be a bug because it would be incompatible with the rest of the world. Jun 29, 2015 at 23:37 -
1
-
3That's backward. When a behavior has been in place for 20 years, right or wrong, that's how it is and it isn't going to be changed. I think the pioneer was lynx (it's older than the web); I don't know why it used lowercase. Curl started out as uppercase then changed to lowercase for compatibility with lynx and wget. Jun 30, 2015 at 0:11