54

I've encountered both http_proxy and HTTP_PROXY. Are both forms equivalent? Does one of them take precedence over the other?

7 Answers 7

49

There is no central authority who assigns an official meaning to environment variables before applications can use them. POSIX defines the meaning of some variables (PATH, TERM, …) and lists several more in a non-normative way as being in common use, all of them in uppercase. http_proxy and friends isn't one of them.

Unlike basically all conventional environment variables used by many applications, http_proxy, https_proxy, ftp_proxy and no_proxy are commonly lowercase. I don't recall any program that only understands them in uppercase, I can't even find one that tries them in uppercase. Many programs use the lowercase variant only, including lynx, wget, curl, perl LWP, perl WWW::Search, python urllib/urllib2, etc. So for these variables, the right form is the lowercase one.

The lowercase name dates back at least to CERN libwww 2.15 in March 1994 (thanks to Stéphane Chazelas for locating this). I don't know what motivated the choice of lowercase, which would have been unusual even then.

5
  • 5
    Unlike basically all conventional environment variables used by many applications, http_proxy, https_proxy, ftp_proxy and no_proxy are commonly lowercase. I don't recall any program that only understands them in uppercase -> For the record, I just found out that docker 17.04.0-ce only honors NO_PROXY.
    – jaume
    Nov 29, 2017 at 7:50
  • 1
    cloudformation scripts (cfn-signal, cfn-init) use the uppercase variant HTTPS_PROXY. docker also uses the uppercase variant. Oct 9, 2018 at 5:24
  • lower case would not work for me, when trying to add a ppa repository. sudo -E apt-add-repository ppa:xxxxx/xxxx. i had to unset https_proxy and export HTTPS_PROXY=http://a.b.c.d:xxxx
    – Mheni
    Apr 22, 2019 at 20:35
  • 3
    Curl explicitly uses lowercase http_proxy because of exploits where that environment variable was set by attackers when CGI scripts were being run...
    – Anon
    May 18, 2020 at 14:58
  • 1
    Also see: link
    – minus one
    Feb 22, 2021 at 17:00
21

There is no standard and both uppercase and lowercase versions are used depending on the application (also see HTTPS_PROXY, ALL_PROXY, NO_PROXY).

For example:

curl

ENVIRONMENT VARIABLES

  Curl reads and understands the following environment variables:

        http_proxy, HTTPS_PROXY, FTP_PROXY

  They should be set for protocol-specific proxies. General proxy should be
  set with

        ALL_PROXY

  A comma-separated list of host names that shouldn't go through any proxy is
  set in (only an asterisk, '*' matches all hosts)

        NO_PROXY

git

http.proxy
   Override the HTTP proxy, normally configured using the http_proxy, https_proxy, 
   and all_proxy environment variables (see curl(1)). [..]

Python

urllib.request.getproxies() supports both lowercase and uppercase variants.

It also mentions a security issue:

If the environment variable REQUEST_METHOD is set, which usually indicates your script is running in a CGI environment, the environment variable HTTP_PROXY (uppercase _PROXY) will be ignored. This is because that variable can be injected by a client using the “Proxy:” HTTP header. If you need to use an HTTP proxy in a CGI environment, either use ProxyHandler explicitly, or make sure the variable name is in lowercase (or at least the _proxy suffix).


Some applications allow NO_PROXY to contain stars/ip-ranges while others do not.


So

export https_proxy=$http_proxy HTTP_PROXY=$http_proxy HTTPS_PROXY=$http_proxy NO_PROXY=$no_proxy

should have you covered.

1
  • Thanks for mentioning the security issue. But otherwise, for good measure, I guess we should add ALL_PROXY and all_proxy to that list of exports. And maybe FTP_PROXY and ftp_proxy too. Aiyaah!
    – Tom Hundt
    Jul 16, 2020 at 21:14
1

WGET - is only using the lowercase proxy settings!

1
  • From wget sources: http_proxy, https_proxy, ftps_proxy, ftp_proxy. But doesn't support all_proxy and no_proxy (but there is an option --no_proxy) May 10, 2022 at 7:28
0

Most applications seem to support upper case variables, and others support lower case. I think some of the confusion comes from the curl removing support for HTTP_PROXY as it could be set via an HTTP Proxy: header in a CGI-BIN or PHP-type environment. Source code from curl:

https://github.com/curl/curl/blob/30e7641d7d2eb46c0b67c0c495a0ea7e52333ee2/lib/url.c#L2250-L2266

GitLab Blog post describing this madness:

https://about.gitlab.com/blog/2021/01/27/we-need-to-talk-no-proxy/

0

You can use this script to manage shell proxy on the go...

set_proxy() {
    type="$1"
    host="$2"
    port="$3"
    user="$4"
    pass="$5"
    if [[ -n "$user" ]]; then
        export http_proxy="$type"://"$user":"$pass"@"$host":"$port"
    else
        export http_proxy="$type"://"$host":"$port"
    fi
    export HTTP_PROXY=$http_proxy

    export https_proxy=$http_proxy
    export HTTPS_PROXY=$http_proxy

    export ftp_proxy=$http_proxy
    export FTP_PROXY=$http_proxy

    export all_proxy=$http_proxy
    export ALL_PROXY=$http_proxy

    echo "$http_proxy"
}

unset_proxy() {
    unset http_proxy
    unset HTTP_PROXY

    unset https_proxy
    unset HTTPS_PROXY

    unset ftp_proxy
    unset FTP_PROXY

    unset all_proxy
    unset ALL_PROXY
}

for example to set a proxy, run

set_proxy socks5 127.0.0.1 10802

to disable proxy, run

unset_proxy
-1

Both http_proxy and HTTP_PROXY should work on RHEL and ubuntu based systems.

-1

The convention is to use all capps environment variables when exporting them, so that when you are writing shell scripts you can use lowercase variable names without worrying about name collisions with other programs. Of course this is a convention only, there is no technical restriction on limiting the names of environment variables so the lowercase version could be used in some cases, but best practice is upper case, and remember that they are case sensitive so they could have different values.

7
  • 1
    Unlike most (basically, all) conventional environment variables, http_proxy and its siblings are usually lowercase. Jun 29, 2015 at 22:42
  • @Gilles that would be a bug.
    – hildred
    Jun 29, 2015 at 23:19
  • 5
    No, it isn't. You're right that there's a convention to use uppercase for environment variables, but it's only a convention, not an absolute rule. The de facto standard for the environment variables http_proxy and friends is to be spelled in lowercase, in violation of a convention. For an application to use HTTP_PROXY would be a bug because it would be incompatible with the rest of the world. Jun 29, 2015 at 23:37
  • 1
    snarf requires uppercase and there is a bug report against wget.
    – hildred
    Jun 30, 2015 at 0:06
  • 3
    That's backward. When a behavior has been in place for 20 years, right or wrong, that's how it is and it isn't going to be changed. I think the pioneer was lynx (it's older than the web); I don't know why it used lowercase. Curl started out as uppercase then changed to lowercase for compatibility with lynx and wget. Jun 30, 2015 at 0:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.